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", 0x1000}], 0x8, &(0x7f00000015c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8c03}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0xfb}}], 0x90}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001680)="8671567691d9c8099fcefd2cc92b46ab0ba9bcea0a019d1ef9babacca185e351077f87ca19dda29b1758001ebfdcfe4d274c930d34c27af778ee9f13d42a326e26c1525259e679263d5845687bb5a67168392872f4f1dec9d98c4e2e8061017281df00c9b0", 0x65}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="dbfe2c78ab5cd0011715ca55a5dfab889a4d9a7ea4267fc9f56da0e56bc5546ea075c1ead98b022ddee92f53582878dd31d678d0249f80fa0ee5655e1260f374bb8d245774130fd226735212b5f9fd5057b320ccc4567067e6a026bfe2a2ddf2daa467ded44649f523cdc25fa9a92ff81b197ce8a38866aaac079d532d33", 0x7e}, {&(0x7f0000002780)="a0df7ec7800e9e0963f84b46b6f5771a985cf7a56bd717147d044b1165f4993f6b4ee3c4294df9ccaa1210e423e742c8718fe112622c27c2971d1536be87449848a2a205180f6878f5d17a111d13523b33b7592410ce5a87ee4b1326a44a5d01917c3ecb38dfc1c7bcb6f13a7e6535655949c278c9b48205f8a7", 0x7a}, {&(0x7f0000002800)="5552627cef2788c3489ebeb18093feb8d19d2b470c10ad7b7b44283643362dea10e87ab9dd8aca637ca791966109114c20ce4d3c9f4b7d5af2dbd89e9ce2f46feb3686e8d90667bd3cd28f29a7ec1ace596e0593b2a582584fd233a153dad9fc4305ba9aa9210fcb8673d1a570f0af4efe2f7e1cb3fb9acf4d003c735058f52261dc0b1af372e51b9ebc8d6ed3b4e792f9ed5c5bf8805cb6a822a7692598991281a7af2c2f73eb79c216d5467e1ff61a3647c46624ee0c529f27a461cb771f5ffc6bcb78e81cebd40bebd2875dcd47e0a638ca", 0xd3}, {&(0x7f0000002900)="3b74aa2df9e5faae213430a3dbff45e5788af0e8cdece09e1b0405b6d2f02c890de2c7daeedfbf2383fb354adcaaf488f78631dbb8fe62b5c9ca1d79f4e4536a811bc0a69d8f3384f10a8d36cf15878b761e1aed03e5deb5ff1de81b250acfec9c94a14c3950cde9", 0x68}, {&(0x7f0000002980)="4ab0900e8753f3f1511051d12d699ff1cd232ba0fe85821399378fb626721d4d346d310c5e02535a66e8fdf7f8ba8585de5255194d488e957be1718adbb503bd9ea43f068c879dfd2be96cc7a8816eff92b283eb18126516aca2f2cde514db07b57b81b36c936c89cf96fa7cda929763d95acff8f4ca5be0a9b7fc0561c2d30d10ec2b44f8345547c2f567c175204e58178448618ca5517eb8f26fda8b01eafd20d8a988d7e94a12b491f230406517ab4b3c38f6eb504fa20565d137f2040f9d442121d4f1b25adc948401efa3466a3dfebb6c8b06ea23adf373d6149973510fb6c1968658829083389b", 0xea}, {&(0x7f0000002a80)="a2045cc96a866eac9c4579a1db4ff9055a497be9aca2489a247b556909ef42086717ef50a3fa5387510875f64ab87f1100bff25349135229c2ce21d24bb723b4df44ba787b", 0x45}, {&(0x7f0000002b00)="da7d97839d2b3424e3cb6e00972fdfe3b1c4362612427b9c27d5d20adb448b84e67978d5ca864ebb186da4857a8b8a52d54e38a5d64adfe7b46e490c482e2635c4e33ebc70e9d556d7d59d1d7404f107bf51cfb14e27ecb5afc0028b2d9f27dfc88156843545bfb697812b633277bb46a7440e0c26c624c21efad8597cd12ae58e916dba1db78bca53e7be5a776babe1641366774ce3f12e0d3a5761aa450fe043528280f550780f0342d60877a48976daf60e7f7bd0a35b79", 0xb9}], 0x9, &(0x7f0000002c80)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18}}], 0x30}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002cc0)="6be7368c2d478dbcee14095f004edad92b567deb564449c813c5039d61ccfa97834a0d83e32ef5ad6d49dc1e39e6389c7dd3448274bf627f3c14bf6c7a898e0205b8d8f46a9b697be13342cbe6940a671c7c7753107077df2b2c56121f829be9ccdf77d7cb88279bb3b85b093ac8b01b8a10d4e9e870348c70510401a2b73d548d28891f4a27ba68e290dc5cb3ef728d52399654cdb023d903a1b86c5fa6cb332bae7cc5ad40f0fcee41249614dee7", 0xaf}, {&(0x7f0000002d80)="acbef1b1fff3ac399d25b054da2f3dbe51176003b49a921d62b6c0192a705f763d44bc1e745245b3011a4b438def3e43368b1477e7b6c5985e5b5a5b51d8312fc859af01ef555ca546763a628249a9e80ddfe14e6f4ed78443251ee370be9bbc37d9919219c5aef224a7a4216faecbddb15a80db45396c5a30409b1d39859e6e6dba7656040a46e19bebd4fa7dbef50063c7bb102e6bc4df191c36e410fdaea2fd519646ea62803b7cbdb59336530240f7cdbc1a60b9e793434662c37dee711de7edce1541a7adb4784d5d84db", 0xcd}, {&(0x7f0000002e80)="dff6bc332857414f95be791e317f0e67a621a2e752ee8cc55b4a5c4b1f527003fdcd7bdff39e762b778a773aeb57b71127f49b78c73eb806aec91b8f6a7170661ce563c7fbdedb60a7e732f8", 0x4c}, {&(0x7f0000002f00)="02a190d4d1ed89f069f2ffd3341e1b781ec70df60b456007f57403a578e3b4cf06c48c0f4abda76c5c1a8abe8cd30c1fd973d765d5c713177aa01fd0b633ac2e37797a99ff05fa192a6b027f954f1ca0ffcf9e50de760af3bb2d7b094f677e8f0f2f33da75", 0x65}, {&(0x7f0000002f80)="6f9c064912c1c2fc79657c3af227a866c0fa24c495cd7c81c12e2144d9a64d973eb1c054fe947ce4e52e2a982402d8768a9b7c0b906d61a97f2c4d1205e2737eeb31a5125c5a0038", 0x48}, {&(0x7f0000003000)="1cc3c3aff089d2b134952059d688ce53b51eb2646c01bc104807203737e65c10bc0b623422ce9142de67b23bcee8570e3df2be1fcbcc3d970d1224b7372fe9f27dc2137bf71310e991cbaaf482454f045597546b2fdf61499e704d102aee22ebb78f39cf19ccc6a6ef46c170540f7394be19e44902bf61d4aa71ac0e634bcc72cd0047abe991f22f68a5aa63d9cc97648864c9744cb5a05074abe6716a804fda7d4e9a97177be02c1ba905ae92dd448bbcc530bbbef5d578bf963ea5c1c59b44abc22bf156a6cbf7619aeb", 0xcb}, {&(0x7f0000003100)="d2147e2947834eac37358747de76648ea10f70b3287dd1da63d0a4c5bd2f381bbec0bdb1eab1ca9b31409e7b3e393f5adaac28583e4ecdae2cccc24ce2f86fa639172121cd09908c75a7acb15415593a508964e48a7744851df2f45805cfda3438f257a76ee3709e8c47d615bab47cc6b613289eaba6b20e129f5a8a0095d51f1db708bf69c1306f616d6d6dceef40613b0b387def95bbc59edb67d0ef5c77d110c4d20a7ec695751722f20e99327452ddee73b1b85b747a4ad90e96c863208a4067ea943e", 0xc5}, {&(0x7f0000003200)="5a0ebed3171bc9f6b2fa2b8443a4d4f49cd249f7ad4b740c1023ab6bd88a010a7ab4603ac57ecd5aeb3a96022537b033f97bf1a24b0eac8652aa8e686a984e7130898435a60acc649c38e9463d5ffeeecc08ecbaf40daddd093a0f76ae41a73cdde365f4e15d2f08b90f9e34bcde6df8163a8f05f9cd486f8eb521541687be6ab575df840edf72d422730a49c933ca8bb13a3c792dd6d787", 0x98}], 0x8}}], 0x3, 0x4008031) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003580)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000003440)='./file1\x00', &(0x7f0000003480), 0x800000, &(0x7f00000034c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}, {@loose}], [{@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@smackfshat}, {@obj_role={'obj_role', 0x3d, '*\''}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000003640), &(0x7f0000003680)={'0000000000000000000000000000000', 0x33}, 0x20, 0x0) 21:46:29 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)=0x8, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x800010, &(0x7f0000000140)=ANY=[@ANYBLOB="b32af08ddcde4099e0f81600201ec9a77a5376f9c684c32af6ca80e57ae3befc1d18411b9f36feea4891617104bc113ce21ede79d1732dc8249355f223c86ec514c86cdec4a3e95f6d665e57260763009741a6ac200d"]) [ 2217.386708][ T9966] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2217.395919][ T9958] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:29 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x8441, &(0x7f0000001380)=ANY=[@ANYBLOB="7100f15460649651265e561ed7f2234af3d86631b9e609f1ecaca35607a8d45dde95a28a590552f4a688fd0703221dabdb3d46d8cc26ac4889eb931912558a7460f0cd6fcea0617a5685d0aff56d52a927efa5f749fde5a86adc663b989114c5b7217c0026543c65570ab33243ad6a816a61b90fa6fde97ee85884c192754e51799fbb006a68a6bd72b43e66e581fe5309ad26"]) bind(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000001240)=""/207, 0xcf}], 0x1, 0x6, 0xe0fe5c7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) bind(r1, &(0x7f0000000080)=@sco={0x1f, @none}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000011c0)={{r2, 0x0, 0x100000001, 0x3, 0x2, 0x6, 0x5, 0x0, 0x7fff, 0x10000, 0x7, 0x4, 0x1f, 0x8}, 0x10, [0x0, 0x0]}) [ 2217.441015][ T9966] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:29 executing program 3: io_setup(0x2, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) [ 2217.495005][ T9958] loop4: detected capacity change from 0 to 4 [ 2217.510288][ T9966] loop2: detected capacity change from 0 to 4 [ 2217.519548][ T9958] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2217.543370][ T9966] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2217.589977][ T9966] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:30 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000011600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:30 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0xc0) 21:46:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000000b000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2217.873965][ C0] sd 0:0:1:0: tag#3031 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2217.876810][T10017] loop2: detected capacity change from 0 to 4 [ 2217.883884][ C0] sd 0:0:1:0: tag#3031 CDB: opcode=0xe5 (vendor) [ 2217.896378][ C0] sd 0:0:1:0: tag#3031 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2217.900249][T10019] loop4: detected capacity change from 0 to 4 [ 2217.905408][ C0] sd 0:0:1:0: tag#3031 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2217.920518][ C0] sd 0:0:1:0: tag#3031 CDB[20]: 80 19 84 20 e0 6c bb 21:46:30 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2217.957671][T10017] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2217.972796][ C0] sd 0:0:1:0: tag#3032 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2217.982677][ C0] sd 0:0:1:0: tag#3032 CDB: opcode=0xe5 (vendor) [ 2217.989033][ C0] sd 0:0:1:0: tag#3032 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2217.998203][ C0] sd 0:0:1:0: tag#3032 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2218.007254][ C0] sd 0:0:1:0: tag#3032 CDB[20]: 80 19 84 20 e0 6c bb [ 2218.023839][T10017] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2218.033183][T10019] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:30 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="11c6ffe8dcde8e97ff11d04d8b1043c7513992466992304589763e2fe26344da82f5f83908d0a4867e78b9841a69f78e08b9d7c5a99f610bf841cc079864614981da783be790269e58e4eab9f82465b614371db3267d9d6a8a44b1b13538c2b9c1fab8ae88dd39ff3c5d90a2923208a3b9c6583d648adf1f7a6cdeab27a5c80b9179fa6039f662a3a1c6438d47bfa60ca8aaa22f1f19de01f2fadb8ce8e508e6df2ece513fef60e0144ee29ab91c940291895df3296aba1ec5c39884922372ed3318", 0xc2}, {&(0x7f0000000040)="808743617150cd1068309750e2f1a3cd61368e592871438a65d6b38f3aa5c6f0c7e59107316235ee7d260378407e30414f790c3a7e", 0x35}, {&(0x7f0000000340)="d634b40b5c357f13490bb0296c8ae23091ae9c665cadc402f510241a564597c09217fefd2e8e59339cf524df4df74d0295970d384b1121300aa03dbc4c1a1e47c57faeee36284518de6d223e98baadee96cd930c7c5c4c7d49dcf67ed4f373e3bc1c240ca53164d37cc2fee140d76f0608e18ee6153643579f91081c89bf68a099640bfda40ff4b61cd655068864178c2d596a0e957b0127dff8a716e68d6db3336d3210c97310badf3afef70e7ea198c83687bdd4ed73c0ec9fdf96cfd24267a18f9b3fa3ababb732899e40d1ebc1f1ccf465b3844cd723d3e82122d32d2875f0fe", 0xe2}, {&(0x7f0000000440)="1a704669b134a4f452c03e49e36468e07e6dc4d7c93c6e4b740aa15b69c18e43d836459d275c7811f11360c97bf20f1400bf798e975631efc583b1b7fc8fa55f0d9b2b254b8be8cb5271de953b25a9feacf7c265bd332602e631df2b2c7ef13735437078f3973ee65f5d3f4e301f044923666fb68602074465eae0ea58df590b64392a0be0db084e217e8326846e5e9eec9bf604c24c741f70bad24be36383de4e3e13fb251080d50ddad297286dc5d46ab8931828ce97d38ffc7bed77da4487d163914e7e518c00a0859119ea816a2d7c998d5849c543a8bfb4d95a81f88275827650f9", 0xe4}, {&(0x7f00000000c0)="267265746f45496197e10f369752040a1e7c1367bad785dfade486ce85778ae7656175e71cfca6809e143a89246ba42e80803aa6462fc2933632be5c", 0x3c}, {&(0x7f0000000540)="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", 0x1000}], 0x6, 0x3, 0x2) 21:46:30 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2218.103066][T10019] loop4: detected capacity change from 0 to 4 [ 2218.105632][T10017] loop2: detected capacity change from 0 to 4 [ 2218.118108][T10017] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2218.130183][T10019] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2218.143518][T10017] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:30 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x88a00, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x1, 0x65e9fbc, 0x3fffc00000, 0x3625}, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) 21:46:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000012600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2218.195549][ C1] sd 0:0:1:0: tag#3021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2218.205430][ C1] sd 0:0:1:0: tag#3021 CDB: opcode=0xe5 (vendor) [ 2218.211799][ C1] sd 0:0:1:0: tag#3021 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2218.220838][ C1] sd 0:0:1:0: tag#3021 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2218.229894][ C1] sd 0:0:1:0: tag#3021 CDB[20]: 80 19 84 20 e0 6c bb 21:46:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000000c000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:30 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2218.342694][ C1] sd 0:0:1:0: tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2218.345154][T10072] loop2: detected capacity change from 0 to 4 [ 2218.352566][ C1] sd 0:0:1:0: tag#3025 CDB: opcode=0xe5 (vendor) [ 2218.365135][ C1] sd 0:0:1:0: tag#3025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2218.366442][T10073] loop4: detected capacity change from 0 to 4 [ 2218.374187][ C1] sd 0:0:1:0: tag#3025 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2218.389263][ C1] sd 0:0:1:0: tag#3025 CDB[20]: 80 19 84 20 e0 6c bb [ 2218.434490][T10072] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2218.446278][T10073] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2218.486265][T10072] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2218.519069][T10073] loop4: detected capacity change from 0 to 4 [ 2218.530664][T10072] loop2: detected capacity change from 0 to 4 [ 2218.539706][T10073] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2218.549398][T10072] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2218.582830][T10072] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:31 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) 21:46:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000022600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000000d000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2218.897010][T10106] loop2: detected capacity change from 0 to 4 [ 2218.913901][T10113] loop4: detected capacity change from 0 to 4 [ 2218.923811][ C0] sd 0:0:1:0: tag#3026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2218.933702][ C0] sd 0:0:1:0: tag#3026 CDB: opcode=0xe5 (vendor) [ 2218.940070][ C0] sd 0:0:1:0: tag#3026 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2218.949179][ C0] sd 0:0:1:0: tag#3026 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2218.958265][ C0] sd 0:0:1:0: tag#3026 CDB[20]: 80 19 84 20 e0 6c bb [ 2218.965640][T10113] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2218.986896][T10106] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) open(&(0x7f0000000040)='./file0\x00', 0x302, 0x23) 21:46:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:31 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2219.007223][T10106] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2219.027340][T10113] loop4: detected capacity change from 0 to 4 [ 2219.040596][T10113] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000025600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2219.099515][T10106] loop2: detected capacity change from 0 to 4 [ 2219.114749][ C0] sd 0:0:1:0: tag#3032 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2219.124638][ C0] sd 0:0:1:0: tag#3032 CDB: opcode=0xe5 (vendor) [ 2219.130998][ C0] sd 0:0:1:0: tag#3032 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2219.140065][ C0] sd 0:0:1:0: tag#3032 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 21:46:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2219.149126][ C0] sd 0:0:1:0: tag#3032 CDB[20]: 80 19 84 20 e0 6c bb [ 2219.155997][T10106] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2219.211596][T10154] loop4: detected capacity change from 0 to 4 [ 2219.216612][ C0] sd 0:0:1:0: tag#3034 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2219.227524][ C0] sd 0:0:1:0: tag#3034 CDB: opcode=0xe5 (vendor) [ 2219.233880][ C0] sd 0:0:1:0: tag#3034 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2219.243042][ C0] sd 0:0:1:0: tag#3034 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2219.252116][ C0] sd 0:0:1:0: tag#3034 CDB[20]: 80 19 84 20 e0 6c bb 21:46:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2219.262903][T10154] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2219.336190][T10106] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2219.336197][ C0] sd 0:0:1:0: tag#3035 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2219.336221][ C0] sd 0:0:1:0: tag#3035 CDB: opcode=0xe5 (vendor) [ 2219.361730][ C0] sd 0:0:1:0: tag#3035 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2219.370793][ C0] sd 0:0:1:0: tag#3035 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2219.379850][ C0] sd 0:0:1:0: tag#3035 CDB[20]: 80 19 84 20 e0 6c bb 21:46:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000000e000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2219.423129][T10154] loop4: detected capacity change from 0 to 4 [ 2219.450030][T10154] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2219.515908][T10175] loop2: detected capacity change from 0 to 4 [ 2219.546804][T10175] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2219.567048][T10175] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2219.637328][T10175] loop2: detected capacity change from 0 to 4 [ 2219.652007][T10175] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2219.683908][T10175] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1f) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x19, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6400, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[], [{@appraise_type}, {@hash}, {@fowner_gt={'fowner>', 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '%/:'}}, {@fowner_gt={'fowner>', r1}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}]}) 21:46:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600002e600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000000f000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2219.988411][T10198] loop4: detected capacity change from 0 to 4 [ 2219.989458][T10199] loop2: detected capacity change from 0 to 4 [ 2220.010470][T10198] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:32 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) 21:46:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2220.063138][T10198] loop4: detected capacity change from 0 to 4 [ 2220.072758][T10199] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2220.089446][T10198] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:32 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x200000d4}, 0x20040000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = epoll_create1(0x80000) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) sendmsg$netlink(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc, &(0x7f0000000340)=[{&(0x7f00000004c0)={0x254, 0x2f, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x59, 0x6, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x9}, @generic="d55429290ad30bc9f1cad00d4e4dae96732caacefaa1eb835c76d5f2c173da2024fd70dcc504497593702dfb70354dfaf56ca5c259", @typed={0xb, 0x54, 0x0, 0x0, @str='batadv\x00'}]}, @nested={0x75, 0x24, 0x0, 0x1, [@generic="ad79285a8fa0fecef34a61bba886b1774c4f45d38ee9ff1cce892d7e5ec9f22872eb5702d032e947606da9adefe43e79f49059e6cefef061af646b7b0c1a501c86bceb9e1032a7b40a8331917e07f7c90fbddb2c5b65eaa8157a0b331294f978989313dea0fc8c0e65e1a4b0b0d2111565"]}, @typed={0x4, 0x75}, @nested={0x9c, 0x3f, 0x0, 0x1, [@generic="e7007021ee18d63bf15632dbb7d790219df4c83d0ac9b00c756dd2513fe37eda592b4efac4b36b8c24789f48251b9e420a24308d2f7a93255f1a9c55763dec13af34c873c520b7debb63b5b8ec9be71de0cb9362bc60fcf470fe5b8b7b3b32e560f7a384733e3845c26862a989d0cc11402577c6aea971fa91e6ca567048cdff740382387dfbcee4c79f6249784c3b92d7bb59ab70accc0c"]}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="157b20a74400531e387e4569baf1b61f113afd0869bd67951f7551a13a0b8b79a10d34e5c728f5554626d52a8ff67490a30f5ad6d063ce54bda6a2915d94f9353068c5496932b75efc2f780597e1be6955ec2e6c4785ff7fd3033f44d73aa52ecf5b111c393e40e76beb46e0df9031cd77758b031b041af6f1c506483b54d574bb3dc797bbbf06d6d2bca6ab0537fd8c06164bd8e607201d0404bb5030fc1b2d42c73473d69baeb364921720dd7821c4ec5e4f56c0b14723590f9d"]}, 0x254}, {&(0x7f0000000740)={0x2394, 0x31, 0x1, 0x70bd28, 0x25dfdbfb, "", [@typed={0x9, 0x67, 0x0, 0x0, @str='@^\\}\x00'}, @generic="7c73883a6926429f217a08366cd61fcfadcd192d02c81f7a79f2546e85909bb3b3048b884b40d9de8a6263983a948da8678c5adf8131fa28ec82d7c9e6e0c2cfc744c4df73a434f3821ee77bfa122b08b9ab2fc1665492769c0dedc5894e94", @typed={0xeb, 0x21, 0x0, 0x0, @binary="fd4426418b3e9fef3909020495bd4bcf04b4ebab886c8223e65561761e5975d809ca618b532b00a8137fd89575b71b4d6a3bfa0691d1b15ada7d19416dbcd27461518dabdaa2c51a1538e701995337306c3c1b5b9d6f652ccd8a6b3b2339bdd2405fcfb60e5bcc2d8499633d8e77c129b38d1f4ed5561f0e7bcdce9d01c10fc696f77efb2edfd27d62b76a5690328e75f492989e91483a8e10567ebfa4704d2b23aa547facae915ed8fe04769c0ca296c5fe7c74a51ce1370f76a2feced960a0f0b90217f78b2d997e5afcd0183f4de10d9be09408785447cad5d32cbcc3d2e3462e4875b3ed08"}, @typed={0x8, 0x2e, 0x0, 0x0, @u32}, @nested={0x1164, 0x1e, 0x0, 0x1, [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast1}, @generic="49f4fb0684597f54a5d0c9d748a5c220904f9478792d7b37a1ae4fe968acd9bb61238fcffcd1267b26d34b15839aa3bf50fa0368b8d7ac9146049d91ddb63ebb172227c599e93c2746708edd5f3b982c78d7aea5143975b21c02c9eea0b8d45aba2a60e624755f6a86c9cc969d6ecae7e6911526e54d8a754806f80d529d0dcad414e7f29a66bc25a6c02fa9a23759cc1167e3e84274e895df82e86ef00f09a3d66d60d982320ea1de9a7134f16068466f3cf866e191da2104703fcaef7253bd8a59508f8d96fe1bb05a6c6cb48b764a1333d3f2d9ee9225991c531a7b66de039713697be4cbe2c469bc7a844295084ef7c43f8adaf18325b38850d729c5a9fa82e4479927001724e2aff0d939a04913b1f15c876064dab14fcdbd4caf128ca2e25f17d93c59a01f6c95306ed0e4a6ece76add3afebe387a0d9c6f59034923f154985496cf7b3e561766ec9bd504f7c9f9b61261cf9cedd1e4924092914be62199fafb95fb76b0940b91dbd3b801432886bad27366fc0bd521a21736d297755cb897ebf0a3fe8ff7311b7b595fdf48e86c9a2ffd2b81685679ddf19be6bd92f73c7794b172aeaf0bce9d5428cdbfc517fea29be472e66f9c189fc324c210ae3e9c8f4b7434af2fdce21437d5c26e6e819c5cd7b247f7ec8e4e3ecf60fe4c2907924dc2e34857ad3795e64876c5cfe68bb22872427ae8427ed00c523f82be0aae6ad8fc4f007cef52ff132841912cdda085af7ec5f323d130642f91fd751a34528c0639275d3490977421b0037af7873f8febbba852da80bd7975ce900a48bc9c7ea32ba1bb5c514551f272c67c6c305485e933cd62b3830fbc8e3cf3aa542841bef5bd96ba4ef192a2ae698838536b77702e7374c276ad51425b7a437f92bda54c158ace458c7732a86db79ad17557c557bc00a3c74f90d5fbcfac59109d9a600b935fc9e667a9aec707ba50d77fea0bceea1ca8eae860cc0d988cf4e1a2197f415f89bf5ad250f666e43661928cf795cfb2b530c1be2477e2da218973d0384295844e7119041d934f7de8729858183b6e7636045830ed8db97e553885ce72bcf81202f474898a2018424044a0eb057aea633fdee1db9ef3c33ede18b3e4ea67f9d63e0b5cf23f818ad09c4588eb64478560f81215f0592ab4c83c2b6958fa1e53f967a074349fea7af3f910261396b361bd2e05923f8104cda2ca9c8c2567b239cc825bce7ad865bfac687593f367d9321b7d1efb95ff40605ffa189bc4f64dd68807b0cd62961ae673c94b28267ea4102a50888c7d0785cf17c6bbe4f467ac5eac53cf1e06a6a83be86a815d086794171df42e65d3398d40079a4c9bbea08305c97f181f9a7c6c5de86b44f624cba03a13d3f0bc65a772997e1b08f908e9b02cbba2582f50b656925e348069bbb9a5ddc4817af3825a96704019cf302b5055b20327a9b3083cbc2a0ea623f74be6715f94f775dae426a3c0dc6603544f2aa20935d7748e10b78007fa14a187226586c3d189860349818dc05a319a92b2f2f6954744406ac327ef10fd3e01fb4fe4ac47c53be189b6b36ff6cc337ccf30c1018c5d0d2f8281918018f6e35bc969c5ec61b892767f9faa3d9550aadd8fc845f4df6b42db528c2c7462116375102204863992305a8a4e200f90b503d393e4c2fc483bcb0be4dec2587842de43281449ec969179b683a215623678db14d68549258ad4b4af7d5766db3caa90d2a0073511b1793e418ecdecbfc7d72cebd7b3ca17b6c4e2187c34984fdf5119ec7e51cd406d2c5f69a7bf26b1263fb7441e041bc4383c8e68e29c31219e2b91f04e1a361e3fcfac129113d44954b60387c511cb27d0e95351472bda8c88f63df98f4ce4f954bf669933b2889a5b29848771c064fb0b1242a28a20dcd10ba9ccc9f3abed616ccb4c9c715751e16e6535c4d06d0cdcbf49baaf6b13d6cbb13711d368d4abac64cc3cef0a207454bff60f9740b3d0bfc2a0c4ee69be21340e319633c8f310cb54d77d58ccacb6e03c9e3dcdce0b41577fa032a58e29399a038ac52ae7299723ba76415d4a66e290fa43de6b688fc683b919ed47305b08d50f9eed6f083e5e7b4007f2af447d98c63b37c22b9696540c99b9290ca425e7d332912354115558da41064d6f9583b96767a50cfde1e5fe2becc0fc7e6f4e67629990c1144d859833e12d6bf33c1b2a722839772cafee9e3ce8bfe7cbad0e803132c0fbf9ac90b2063ba3d910b7ee9d730ba3ff370178fd10b5f61795e9e9091bf88faaed432a6542c08d8c3525e4b74d112478fdf543009f659475ffa4ad137cef14892d0fb6de6c71b6be959391b696a8183a66229276b4e23c40caffc1a17c4fd49797b9a53a94904b26c737eb4ce28f3fcc28e5bbeaa6129818e71bf49cc7dd7aa0381db2b8881dbb82bb5b42992f673706955aa82b2481c8a5c4dfdce7fa87de9ea8d42e7b283b4b906ce7da999d25b97b7d384d323ee783e3443b70f1fad89eacd34e9b1c8e9fca13b35ac53577883664b639d352a0160d12324d58dc32a946e834122bd194bd65777f2085b09eda75a5979a96ab230795dce94ba2f7661cb90b1733e5ff4fb52600769899cd47095fabd3ad77a868ca1dbb56454f3e7cc524907d88cfb96a3d1460bf55109b2f5ab0d4c8f15eef9e7e4ef56fd256065678a215c7182b623f6f11a7061379f76833f29c4e3fdbdeae55c50806c06e1e3e8de611cab2078bca7349d5747c885cfca5d35b09571ea145a6d3eeb0e714bc578b5c09bfd4d21d57725f35893f6dd50a2d133f70a5298e77d2d76bedcf320d4b66780b6e69055590f0bdb7afe55431a6f19775df5ca5ee3ec9003af92a090fa7cfbcec44704819861565dcaff0f2512e99156b7ade8ff29c2fd26fa2dd946039014e604ce0d1f70d17586a5d982fe9d77588b151c3d9ae8badaaada7db285abf3cc8e5add5f912ec2bfa452166e369339ddfe4a2ae88f19908de32a59c806d00d82cb4bc290651e96f188c51dafeb7a622d122716386fba52b3992cf0dbd7235c01bc5214e8a92d0ccea42328bfcc82e8ff0cfc4b5b6684afe56dd551593aa29282eeb49dff2e119512ed5bff45ee229e28d1d1342b01741c18bdebf5d86a3558c4fc09e34bd6061d3330814959f61ce7c0459fe03d47283ece75eda3652e9c41eb6414f278395002e916cff7e85c9b664a1de2d00e0ba38cc3187b77186d0807a892e2e8496397e8aefc772e577eb9ee69be4d1005bee2c1f2d4df8a38cb92fa9394d882c96180f57b18ecbe477c3c87008e3bbf50bf578d5bc1c4a3a802a71b51431857f3f01ead63d17948274c68078b8451dfb0737f96f0e3e819257de42d249b2323dca1791631b928d6ad1f8f5373de3ed907ba668f7824adaa9b63161ec0b06349c341bb80ba3b8b255be5b4dab65b25fb8f9ad9966a8d38dd48262e5e79a0803a9b5051d70ffcc76eee3dab489d30299c0875aac370d841a0e33dba74d720ba6e2fb1b5555214b34cff9b6fd056118b2fd235cdfb0c9a2da6b9bf5d97191cb712a6514e19593ee71532ebb1cb6bb05802a0532ebc536972d6d9cc4579c756b91358caa2e81a2a5043fce837553d693864c25dcdf5179a0af86a1cf77faf05bb8a31eb2608b54b78c657996e743e8aaf3b2bb0eeae7c29f5dfdf2c22a417b774dc14a9be6358c6c019e6b261c082af38d2b6d7ecaea1137419d921b953c64fdb566148e4d5f4cbe2f73e38678573ec491c230664663d2bd6f21ca0bf9439889c4be8789bec062dfe30a938da6e99d5cc90d4bbfc863b84a93dbaf7d981590138859cbe6d994acca3a713eb600c4cc3cb68c9b4f0efba3a468f65ce4b3e13d902b9f1171cac4c35e5e19c6d9fd7970e36e2ddda1478ee7f159f2422e7618ca82663d8ff328caf2fb2dd734ca84ca4156812792af123772e80305fe58e34ba204e4720b1e83199af58c8b50c6a6e5ba89ad424ccd6bba6062038ae3230fc51475c743ad87b0135a8d364ee7704b7c54ef5e8d15a19e48ea2eeedf4e3db59d8437d27748bb3c7c53c11de2c7a826cb20a9782d7c826817bd43de886eeba1a63659782464ec09bab2831cb9893002312136fe105540ad7aac4462bc2d132fb2a5c6f028da40bef7f19da2e6e5937b0227547ecfb4005e7addac1963350443ba1b23dc090f3696067a4dcd08a230f6515aae0f8f90c456e7d22d5c925080884a77ff7a81a42db22a8e310f3aee511bf0c52b21a7467a684c0f9e07154a27c6087fa480a34896acea479a46174d8fd9dccb2a3b60eb295ad19e80d0b03a19b21fd24500372db0201204e8d7e6e0b3e1b74d3cc46ccdb855909eb504c066f81418f0606ba95da2238d059432fc40e02970ddc772ea9f8c3779b535f8d144c1e1dd47c51ac4a1f63632365c811c9a6af470a30562d7a933807313812fbaa71e449c36b1de05d8aa040abdc183ac0be43f7839bca69e01443e825b6109be88002bf38cdad91cc3b6cc013238a9db521456185c9879ab36c52781964e9b94a90fd4f77a7415c96b9a35eae7de4a848a510d6dada84e4a88da21a73dbceb5f24386c5b4e0f14231ede24a2a502a14018c8d8c60e08c1abe7ea9084e8fe53da45e895b47a89e9a930043acb2bf3a89ba3f111636549b1cc6311f96534db76f695e6a46af053840646c4bd069bd8f20e663ade7e5c89d19c863cabc3b66ddf33ca93941f4879dbd6de987d19effdceca99647184fc5f8e484aa4300b7e5e86742bb7f9f3f3440402dec7562a74e20c2c9bc88b2234c9edac73b42ea91a396180747db6977588786df62d4d1b68a00d80814d03fe25e4f42bd34364646cc04c66d01baa53ed00005325b157991091b0f12ed47c7fe2eb67efbe61feb6302018f81908b2db4f2e10c16773417b42b431623cd0dbf4a1f2a1914cd3b1f22ec567b9702cf843c726cdb3379195d42b5a75749027698e914c206964cb58d0e607bece53487a7e8dff309beba6e282228ae4386dc1ebbc08f9589da98e7f18774557dd9fe6ab2c874153c103fa1873b202e319268c37fe18ffe315cb9cab9034f76a428fef85557dd70a75c938663af5c5a7ce85e684594a6920215047e48db7f71219f2606cf0287c02d6def78e78a5c476d4040593c51e2fa5ef2c3898f4aa449347464ee85e6734001b5d93c63292f2204133553503d339f446264cbeebd06d6073789565f45f918e52cdf6d16af99fbd8d46f98b881a5fea9fe05d2a0dcf0963f4b210b2c444fdaf09e6f5943412b23cb2630d7855e0b106b9f5e7e755fd726fd881816d11a680f7793c50de6eb4b172729eafa431006dc4cef87514f0353419fe75bb1af6686b69e32030cd8a098fe311e3aa60d71706ab6760132779d1bd1e8e4841b965311dc2c437de7966f6c2cae22fac5459d5d68cdb9b25a156309d62085193e7860e2c2301f3ef3f5193d537820b68b5945e3f82f2605abd4f38489fedb71a9afee2341250268b1210806092b50a03c3d13ada4965e8d85cc3531cba0cbba86f8318a235ebb3ea3f33cd9d53f98124cd44e739d1865709577da07126ebd4c7757d7dae0fd3dea365ade99e38fad8e9196153eed9d9f6fe014fc98013e94440ed7fcc1f62c86736879ef0dc36ffbd3e33e68d32aa23bd149faf6e7332b13019a5edde591ffce742024ff50af2f026848092f69aaccbbda1b54b2f0017428d4903913201c0e97f500f2582e62548d2f23afde1d05a28451ee7fdab2187fc199685af0627c812dba18f6a2d03205a5f23355b57d2af0e97e9d1", @typed={0xc, 0x2c, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x7}, @generic="800daea2d7a2f83bd2bbdfa5a38955d83d319cb62f4b138d9b4c5f004c", @generic="35e198f3a78883fcb700885f7b732b37dfe2e9077a4b1bf2af9abfbe434c434740abd15921bfe79dd05f1ac2301da4fbb82a5a44da42de", @typed={0xdc, 0x1b, 0x0, 0x0, @binary="060cae720e8e01002b32e383237c4da59c9b1b8e4d07b6844731a18eb56607651d7827d29f4548a52ed3bd567e6a858c79df2384ec7ac18e0caeeaed8e5e3c19d11ef11ca1a147a95ede2ee5dbd85884b67ffa91d9401ed952f9b0e7d4eb0a92ec65610ce1bdfac2f68ddc9ddba1dccc35dcdb4f4cec5f755886599ed01aeab358f1884470823981212f01caa487ae49b28ae43c13b6b89bd6c9b53c6287352b5efd4a3ef63b81bfbbad9ef8abc84e680708c0baff0a9a580b9a4c1fba6cdef00f0521a069377201567cac283f87747f79b6b5a6feaaf0c7"}]}, @generic="d88a9de40ff57d0d7b94e335f7c56c5803f4f9eef6eb2dd2b17e36b1c22e1e16141d28bbad912c49cac4ce4c10c05e5c1eaee45dc2784034f8cf367ca5a11aea84d4ec14a5100e02e7a3c7798a2e7ce39a2736a67de9ae531771f65156549fedcccdfd5de378c3ded52ffed6d29f2a989e3d53e508d8cf484eba64e498168b6b44b2a4b49655bd88c06de3980404af7fcabf8109c800fd12ec97cf", @generic="5c5e2c76871b0a8e14c1878770e15d63ee458af2492ef0d348a6a31527127679e946945a3f64", @generic="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"]}, 0x2394}, {&(0x7f0000002b00)={0x2290, 0x32, 0x100, 0x70bd2c, 0x25dfdbff, "", [@nested={0x105b, 0x5, 0x0, 0x1, [@generic="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", @generic="8a09fa4208dde1ebd5260a1cfdaa7ff0f07156c5423fda381863a52d07f25cbc97abc2959326953e79f211ab7a4536875d7a7c69db18d73d15bf3aa622a163f338aac51da0005c0aff938392d49a55b58edd0f", @typed={0x4, 0x7c}]}, @typed={0x8, 0xd, 0x0, 0x0, @fd=r3}, @generic, @typed={0x4, 0x79}, @generic="6d549a3ee1d32045d7104f294085849078e589f991a8ced117e771c2f9c5af26db8d59ef50b6a493301e2bca9aaef82de7b80c272092f5fc8f021101996a9c27b79b027649b5c17d04ff2cab73bd6beb20568da429eb72ec4ad8e327a9a4b20436f6bcda11df195205741df4258e9444a1430e77b85bde89f54ec7584d749409a36c1f29acfddf7c89ac4dc495eddccb3835adaa63a55e15071f60939ddf573734abb3e5ad314b6825b6ab5e59e606c2c069518af207226e89c16fcbba5472b64b144f3a03f475cb2fe50464cf5bbf7a811c0957a75a9338dcd0ca2b126a", @nested={0x1136, 0x2e, 0x0, 0x1, [@generic="f56ec84e5493fcfa241ec7c487bfc69c2cce24c16522a6ed1ea0e612cfca1f3bc96dc68d742ecbb9", @typed={0x4, 0x53}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x8}, @typed={0xa, 0x6, 0x0, 0x0, @str='$(]/*\x00'}, @generic="c2a2e1616b5ddee3e165bdd97d994210ef692490b578e3e08b58963531d98039d68fa36a57e1b2b1c00cdfe315", @generic="35f628e1bdaf58026d00e2b7b2266c219548cc72838c072b98a397159f9e278f02d8cab34d93f3587df69da4e932b7a79b5f3197c5968489e9fa431d58762f32a362bcd312c08b6d30dea7fdbf46565817e4e04bf23901010e4f4bafecd8e14c978192ab9c82fdd21e6e262229e0af023a7ad664ec3aa0e90e84dbf076768efadf9bc5d585d7d3f1c624585b50b33b40e66fd9c9b3bf5b4161e329bca9c8f2fd8ba681197450ae43dbac1224e9", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@loopback}, @generic="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"]}]}, 0x2290}, {&(0x7f0000004dc0)={0x2864, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@generic, @nested={0x12b5, 0x13, 0x0, 0x1, [@generic="1cba3a7bc6b6c9a7df1526b2a26ecd68f215f78c03a70b0b165c4081", @typed={0x8, 0x40, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x66, 0x0, 0x0, @uid=0xee00}, @generic="5c908ecbd76c2d281b06581458791e028deca40effd1f9a994af0e276b7c1d25dcf2c94acfdaea9ff6a73951d4375f61242481732b86f4580e0548c8681f17f3ec9762b1cf4ceb7d6f8308d39ff3e074025bcf0cd62f52f9ece12b68a93fded675c47f8fd1392278744a8ccfc5edd12e124f54156368e1b9bbc7b357afa4e91d1db43caa6c4368a1854cf16537888a63319a17ce56e330445ecd7653b7fe672453d4000f8419a91b7e6aedb4d9fbab18576656f9749ea4a8834f7d093e53af712387b7456fbc06c4120f6ed9c5a3e4315c661d1cc8b361f0ed2a648d54f573a5b5e6555828af", @generic="b9778050a3e11257f00ee1360944262b7df485684c17b911a82d3f205fd3e438c79ba9c2329df6c30b85c61488f61c485cb7587cc8b5f13eac0234bad964db5e4b6376cf56c996ac91587c013e41ebee606f2059330ba6a31696174fa659f319eac5f845916a1da106401ab6f942339b228b4a660bbda2c695397ce1bc0d5ceac74799800e6ad7acf8622a9c3f0f45b721e33f33c9a50a712277aefba6edd220cec65b5fefc25154ab890e41f8e4c254df2559a48de72210203c416459b4a2", @generic="5bd77f05e12178e21930f4f3dffbe9e09476050ff836428ff3", @generic="5e6e9199b45be03241b2b17ea52e3b1b94055b3e10f44c848512bfa81f592e749a435f6899423b9fd31a627c5d76e87bf9b44e44e1cac6a4b43d02c688e2b02755dba27ef8a52725d694b751f579de58fc015481d52588e9669da220ac78b6f7c3843a71afe48070c1fc550842b6fa66c3932d5e905ac1cf28152863cd6724e8a7364ced5cd4405be6c7197093c9cff31d12ed3c00f65c78c6ae30d11887e3215d3af336e4c4840d4a8e6ba3394edb66a20cf8eeb2169e3347c97642310587df06edf172b776932aca2ef296a335f0fefbd868972f7a77e3afe8b75c595b2d7553465cb2c44d8401e97ddf2c1370b753a08353acc39bb6567aa6a108b353536d672a88b8a581483321488b58f25cf7c47f2521e9495944fd4ff6ef5ceae896dca1e0f7c175997eb0b51f2a8dff028972d367bab21f97aa5ff2a81a7200762003f963a2031ddc76defc1b94fc3b278758aba559abbd4b5499495d4cfcc0b180a26b0b702e477909b945cdbbbfe85fdaa7e4eee9c8c5a4572526a752ad30f2ca70267d0aaeaf343bd4261824099ad7ab4a14252bd156a9ebfa6c8ff45890f39cb42be5ad97fe3393523cd234f6e6a17eff6abaf24bb3ad79754cf6909f5e12b3b6c4ed6f6fbe08df34e0d821f344704672cd675c11cceb8239cde0c509e54a8ee417e59e61dcc1e59485b529d212529d601176d1a718cf0a26c87eb75c0dd07e133d68caec2dd1058d037308cba4f3639824890dc7ec6f2753a444c039549849cae44deb7c49391c9552fb7ffd9de2cd5931800550650380a1c0d55b6bf259b72b9b168115899f9d8b806b8a34a2f56affffe244367a23eb6f153eab871246ebe5c63d3f0d069d7e964bfadbf12bfccd14a8c649802294fd8ecc0476db1817d474ea4356830a01442b3f8824af24186dc32574c1eb7975d9f01229dfacec4aff0126b7a424767dcec18f23e0e9d26f4b98b5806683bc871cfaf0dff2e06f9d984284a52ba130331d3a72a2fed3555879774af24c00c980d80849083cef5a6859eea91955b9e50d466900e75159d2b43eacf705219e573839ac43b687425af674fb9b05adb56b9cdd55b53322f0abe836201f36567c03cb054c5679b539d02bd26a8615fbc43e8099f18296da636f449745a24de51bf7c01dcb7e0a57d959cb58219f8d33ca9eea056a1ea0026fdca9ac58afefc344b13ff6173221733e87f562d229879beab7c2560db7a0979ee4090b6b0ae82688674b9bce8c3b56c5dac2d96ff49f88bf19a144b3adf69276dea28aa7dca4f5761ab46037d35afa2526441c6727c778dfc8f053d50ca6261bd473a2aaa780626270cb16171fdc20a09b5211b6a425aeaefcc54161c8ac9edb3f4a447d306e6ef146875844e2c5502fc51fc99ff455a1fb350454ff206d12d6c606b36d14d4ebab63d007b2f8f540e24c6f696a91a49c20d2eb8b757e77ac6de3d8f5deb58e516063e4122a4b46d381035e9ffa0e8fa51485e200e524786df9aa179ea0d1e326c8afc1ba67d1489fc0aefd29ae2a40aec1dcdc55a380a7dd6a2bf62b6a9871354b9aa811cee9d6fc0f3f5bbdeac079dcf015b6cdfa8b3aed1832eb8e865b364e8859de16fb5177daeb372ed3efb9f6656fc283e1eeca0c39f4a8a81b0af0faf0eec39a420489096285cf95ce25be5dba7f15b840e1a25e8e9d1a91431b496bfdf202b45f6914b72e3862c05869e7e68e69ffee626211facd4b9d6966b97deea5d142fa540d663e87b7f214be2ec086f178f28ab298cc0774744733e2ef14b5401a700ef56628001afe21c508d925b8f86228319297d6d8df125198081eeaf82758a7eee67b5471571c0a7c1a7a83e0308193801f85cc4a1928da7cd5e9ed5a8f6e945dea49ed6068c762030548b9269d0bd5f62aba4e23a17275ecaa20b44cdf06fa1588985907e937609ff2c76f4527a0e877fec6020bc6a7f8757bdd2016f6dfbc1b0224744074be440555159b57fb8d08f2cf98922cdb4930ce73763d9e115c30df4e5ff821e592bf01cabb9823c48ed8c80460a48b793f2f7bed7d1581a26bbf0ccf7203169d15937c636da2e556b5b559c1170aab5612426d2b63520e6ff5b59bbdee9d68c0a80d76d95b5805aebf7286ad0103f9b5655a7dbb9bd3b6fc0c2d52c286f2c62c9bb8649a0ab68c95090bc4e3020d4e1cef71c470af5a871a682e3e49b173f7797b64634fad4399a6241ee850ae27f34c97664ffa4ae8f1d17608ecc5024a1c7ade47a41bc93e8e56c473e95c0bb700372ecd1571191ca5d100dcdda822b08e05eee2de563bc5506cb1f2858b07100675cd0f567ea755c0a58a85fba2490cd58dc90597708a6cc52b7bc1bc00279de13a1ed5e3a527f8c21fab4fc35aa1e032ec8947597d9db7eb5fee398582ce07d68c1088eb6b622ccd6e5e37e997ed37a19bb89aec66adf6f172b8228d065badf12fcf012102bfa3f16eaf93cb54128fe4968d40155ce45ab87e3178968987fad65c69502981c95648f37159b48b370b667e84fa28a37af98e3612c46e3465e58063462cfc7fe376b47f97bd6b2df7b93b877eafca2e5895e8f11a5790a05bac414316e4cb1ccc9be96ae81e72f6b6edaeab3fac257ebad0da6ac301bb849109bf90c2112a93307f7fa9c6d36950850bd2fe58f4d5ef96d21507fa316f747ffb8fa05786ebfc4133eda914a0d801e0786822804a2ad101888541390ba4806e9426fd6746db815ee4fc34c0d9ac06ee8805a89d21db2b5f4e95cef5a1797ea8c481a46175f17a31ea96f25a04c21edbd6f10dedb07bb2daa7546d57d635b099f9fd49942e16c986c4edd02ed325b17a9b22af73d456379e169f7e77a26364e73e6a2ec65bb38c9a826c14ae11c6f682a9df681b6a1ae41aec1bd7cb3a5e1530c284a5ad00e7a6b8fb9bfaf61e94e0387b8296f6c2906921c9cc6935f17e8237a20f4ec9ebda2e806605dea6b6157f3ec36dea518dbe2675d14aa9dc6fcc74f9b0a21405bd67c05171cde69816c3427658355a4926ab354abd1488b58bb66b5ed427c1701c6485491ded7d36387b21e876740a05bad59840dbd911c8fdf08628d4c4ff89cf4474baf35afc4a25d0a6ca8b0e05450b62a5bfed3bc1a7aa36b7bdeec03476b293f547042096aad2499c2e37ca70873fcc2d3f825748e4df8fc92ee24cbe1d442e22089b4cdff252787fbd6e86c74f2c9fa0364cf06891ead34c4e5bd6408557797d3061364ace3afc0544192bf37620d9514385e25a4e339395fe5836f0f106d57d11e75a790eb5d14b4cd15e3d3f9966959ca96d541c8325ef8e29ab529718c54f0d13377cfd014591111c399d8edf48be8838e436563d409d79141fd63b7a0f877dbec4bb0290fb0380602e270e2d60e2b9e0a8dfab064b2927f7bb7c8745a58fabfe3cac4620b9ad24995ba6703b4abc1b320f08d5c6d9d6cd2ab98befd0d7a2342a45c2303af3a774d77f04abaf4dff45945e1efd06aa62af891bd017709f92243f96019410fbbbc390ed18284ca229c75d0c1ac81a47c897bed821f7723c0d602d2c6ce8bde070419605cc09471530ab8edd86ea97d2e713e46cee0d2aadfd853281b0423ef0c2d5540473626082d8ccc62f2ceb47b8a5c9c6be8c69689a0b3cda783c5e10526f6cef6624a06cb9b0246655b25043666a45491af26b5563ed5a8a7a9b274134a08bb0d81e26ed4f6466ac92af1f60652dd07b4bfff9426be241f54d92471d33c246597d3b40565f2973989590f661a62bc60505db27f6d319dd55da9efe40e683a5a98db23f18aec7597767719dc5a2f15034e725924a69cb232010b5bfea4617993a140a19adf74c747ed32232fcafed5716eb84c113709f71137bf634c14820bae5e465f6c2a5e94f39c74b8d4a7b5990eb515e358dd1ec46b5da4253433b2f3f0cc9dddbcd0a7de83a3ef569d943094406968e9b4dbbd023058a27abbb3e9d7222e9b2f970cf6deac0f4285b78f5aeb095887a26f555caddec5cdafe35e4e7dc943745cc3595da8d93235d1ceed98051b8ae8368ce8fc24c71454804c9c224d9cc11691f0bf69a394af20c86fb8e83fc61f05d75a06b80c59df760e91c65aa46fb6fc120d294af6823509bc6dbb3321b7d4a6e4116d37111ce12a446c7adf2fd244245758e8c70c24ba9f721242f75ac50fc24cb0467bcda91f46472e357b40e8ad27604da09f204085767f2ff88c02cb9114f852935750b3839d6b32dff2f4d853dfab221f52a7f19f226fd80ea6f1875616caa9c5251e78ce50e6b46f8a0f2ec91c299804aec1e56beb0092c190859f898b8aeb26f3ea72efc6e2f5d80b8e1c30b423ee94d01648223882d551dee278ef200229802f4ac81c288395634b93e9daeb1c7c81e1d27e90624f445fe7ca5b5b52eb80843f607baff0c1afc5e1b175685b7ca7efe3a5029f730dfd7b1d60845ba1f94cc087bcdbafb344a76bd63d700d553bdf8793746f4c9e3a7a2c12f700488d829baddd08ae15faeac184b202181a1ebdbfbc7f7d8668063e8ad32f23c1817ae9ad97be6fa3de7d13856c4bb25856f22121b69ce686c4013c5d810272f5989cbb970bd4ae8519b9f8526c2cf19a9f452a5e452a80da1c92f375959c635536165f1863bd37f59b8f167e4038f19a528a0845964acc84ffd82d30e3849d5da11230d034b6d0c2f0b7d9b4f44b3436d03b266a6ffe3bc7b512f6bdf4bd8cecd48cc56ae88be14df79584a7576d7d30bf3e9c3c881522d73cd4fd3b5afc4a490fce33e98b565d2022c5a6730753d886e9391fbc2852c3046af69e55e06a322aee52005864e223fdb50a3eb1e7423f8f1f7b38f6339f33bc1e356ad40256ef9607bfc4913c25724a2cfc8188c899ec4a74a540dbf956b64ad3e7b9d86999cd8cf050aba6bbd13691dae852cabd10bbe4d8236b99073b531ed496dccc6d9c11d15e2e5c37d9b2e6c60cd2a2f2b8256239f1aaa9d4d20266d38ed617a3858dd4c64183668785663761f4510f7e44c57ea7798d7f37df6fe1f2950da169659b0e015c9f3a5ec153e3dbcb370652ac246d3a85115fe17f64f766396fe7c230f706d54bc88db9b1b0b1cf651045c6b0f995d0cc7faee4cd807d8070676d835e58e4d35779e85151969de12823996cc56a2b0365395638984d4bb91b235878139ce36212741436b012d5b2db5dfc76616e7672df1230a5288b3a563637ef9090c9bb2ebf21a4c9257e574fd4a1dace1f9630ca71142c56830ea402bc6c30d17082e5379d6025c51b59d2563ba5878fca1b1f35e87d088b8a50d3c604d8e5cdd81da51796d1603c20c40702c2293e48a2ab1c2f369a0dd3db5e123354375ccf15af35bab7744657a1eaa07cde7997ac5587a5fee4ff43230702ecaf7822ebe29d7886f022633b06f64f13b06fa8930db527e354f38db0f0fba7eab7ed079487652f29f5d730a86bc61dea111031b243ff2291a62a7626d2e4428ace626895eb63144ecbf71b8802920586190f96d5adcc5fe3475d6fcf7e9c2e2b8dc955547ce162c7cc25a6099aff69103c70e4e85cb357c3c39d48de8434ebea8ac5c20be123ee5b4affa47d292109c921ebbaef46fe0dfa7a6d4b5e3cee48559424c1ed25ca69df4088a50db7ace03ec6d852ef38254919ce60ad1c5e27de6e3d4cd9fb77f9fc45fd87f8c57d7dbe5e88d0339acd0017acc492dfc7a3cb647025483cfd309f823123defb2b4a094d983f2fd5b01558f1e9aa6008504fae58258454984201362314964f8095fef43d94c797cafd9903596d6f238e0c3232495df", @generic="500a9c6f941834fb59aa3e26de78a800a4cbcd7591ba071058a6e2cf178f727d547d1c3f8d32980fdac391ba48f2f71d6eaa0d1bbc8496653677273f81b26a0f04b38ca514fd697be80d28ff9f6c4dfb7f0a14ead4cdd758778ffe6cf59ac58b72943ca2d1f9c1af29034e6bb5fab1b98bceac9cf17caae894ab99e9a4999594e3dafe2d151f445acbfd37c297db7be3eb29fe57d3479eeed9604e89949fa30caf2c518bb3c3284e3cc70fd81498b49405cd6606f150fc89dedf8a81484c0bfc42b96cb365be64"]}, @nested={0x2e7, 0x63, 0x0, 0x1, [@generic="b41be48ad5054ab60b730984e39871a85cd6ba970be5129ec280c1c55690d13581c205fd80399a07d88c5b6a870f44083ba2d06495c2011759527abc5e62fdb911390f8b615c21ee74f1ffbe282109ff6d8b7651e99dfe29ed43adf77c2ddd26cb404af25bb2cb20b54746337d1ee2b747d59a6963467c3b9beb5632c1f44cd9", @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @generic="ca64be5604785b2fdd6d2cfb51db840f70bd12985b63352b12b403fb799d07f070a8d832a3eb1b3c448ddff09f2d31c3b101557b192da7379dd0f15251a3ed28d8e4a98dc4875110928b85b88471b973a743b31bb6ec98cf1bef7c1d9f04fa006c2398135a3973474873577c6d916a448c586a620d55745b2ee9e876428a78aa8dc79b20caa3426e3f53a17be0b3b256412086242f0f5d8c589eebe60d3dd3b4a98ed536d13c408378591766e945d1eb634a9ece9c51b06db2cde90f54597defca811d59ce218f036771f8a92fe6834901a6df41e025e786ba83233ed42e7afa457ddc0a6f56c37b6bf9", @generic="ba438ca587c6c6da29483223c9ca694d266f89613e478f6e4f583005f7a8862ff0760b68e7a44c889d8836f36f2875ed48f8f2ba7ed8cf1df2c86ba23af385ade4ad0ba3fc4eec300d67044a6d8d7e5cec28b0cdc6eb2a48f1861fc79c3de7ec162f60bd14877b8786367b14e1f63ab2352b454153dfa49861d42d7ab5d820b63598deda6b51ae339f933f447f36ef58e875556d8aaf3da9ab434ebb7d737d16e59727d7df524ee4f2f27f354e2cb5149447b723a82678752b983c6ce21f3433193a166d15413af536b6cf559b845cb25a7583b8d04f69f21c06cb513ca2ee590b65f0f94e64b6", @generic="65bdff7ddebccea9040bc6fc6f1316a6a98bb8045dd9dc060755b004ec4e7892664bcf8ff24aff14950762e628c4933a8141af2a268b3b9b61881f6769986dbce4a756e1468458ddbab86063d129af68c881e5cbda400efe4038eefbf6b2d5399d060c9d3a01e97f9862d6be43390986f2a7d5410bee42829982ca7b3371", @typed={0xc, 0x3b, 0x0, 0x0, @str='],)@!\',\x00'}]}, @nested={0x111c, 0x7, 0x0, 0x1, [@generic="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", @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @generic="a395c0f063ef73ac927fefec5c23669a017814288b18b0e264b36713b36d615dbe36d03e265b9d4cceaf7f37036d57d2d20a5c3a2a6d378b902395674824563a51682782d6f0344f90a3892adef4dca6bc00ec8a34c49244d44bdccd1caf2ff1ad4376a66eff0936ece8d9e45486a68329d3b8ff9d853baebe907655757265ee3245bcea3e68e6766bf2ab1179170c9c11d3db65bcb5ec2c8382fb70dd8dbc8637a28790c8447900d6ec0209f4fadf7fb6d4a4f8df40dd533a166c3ba8a8203a4a6e052096bfe633972801c4600acfb021c54ce7b1deedba0b2f85ac1817de9b43088436d421148df6849a759e567d3c73e0db0419c52bb58e", @typed={0x4, 0x3b}, @generic="5f8962e5b58a54cd55baf8", @typed={0x8, 0x3d, 0x0, 0x0, @uid=r4}]}, @generic="761f19c977d36995b9185315b29506bba109f3376672fc059537b9f4c6999e8ab93f8d7adb0c4c0661c587bae9c582a9027fc8c4153354eff9d4bf808ed85dec79806286dfc07f1532be3dca58f49a461b0a604e86b99301ca803c7538d96c2b3051e9a9be63d205af25b7824edf29126f78bae3a1bb6af7a0ae9291e50d6dafc718a2", @nested={0xfa, 0x36, 0x0, 0x1, [@generic="cf0f19fccfd3c98147ffeed05d04ed3bc27f2826df3a21758382aa6a9c8f96543e4e340ff297ae9402587a3f3f38fa3314756ce46482db7295e7fa8eacf82c5ffeac6fb7fdd3c9a49a5f632e7c89dcd94b738c2799c098994cecb8d1fd903a95a266d70d00ab38f6d86c68df2befc5da1effa2601c99263bf2f3e8c2a7ece11d30ab5f9bcf1bfa6d987a88cf6218459a7b743d5a4ab7d08cb5eae5269341207a30f0694eb9df8551b1e3dd4f5f832216a853dcc516b9a261e872eeef351c234abf88e17c0d4dc5b1f64138b0c76c5077448abcbe45232460e8849a8e14be9357d3bf99f2b263a8394f95", @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x401}]}, @nested={0x18, 0xff, 0x0, 0x1, [@typed={0x14, 0x41, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x2864}], 0x4, &(0x7f0000000380)=[@rights={{0x2c, 0x1, 0x1, [r5, r6, r0, 0xffffffffffffffff, r7, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x48, 0x1}, 0x44801) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f267f8362d3ffc31e32b392e0b0267a214"]) [ 2220.119332][T10199] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000048600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2220.185778][T10199] loop2: detected capacity change from 0 to 4 [ 2220.224739][T10199] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:32 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20a4022, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@access_user}, {@version_L}, {@msize={'msize', 0x3d, 0x8}}, {@access_any}, {@privport}, {@uname={'uname', 0x3d, 'ext4\x00'}}], [{@subj_role={'subj_role', 0x3d, '-*)&#-![.{\']},$'}}, {@audit}, {@uid_gt={'uid>', 0xee00}}, {@fowner_gt={'fowner>', r1}}]}}) [ 2220.279061][T10242] loop4: detected capacity change from 0 to 4 [ 2220.285779][T10199] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2220.315221][T10242] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:32 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101002) write(r1, &(0x7f00000000c0)="e901ee49cb86f9027113ba07dfa13ac6aae2a2ad914458920091b5938ef98e870c105caf2f2e38fb3c52cc16049c20787b31c613ff", 0x35) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/125, 0x7d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x320, 0x4) 21:46:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000010000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2220.399828][T10242] loop4: detected capacity change from 0 to 4 [ 2220.420769][T10242] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600004c600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2220.489718][T10266] loop2: detected capacity change from 0 to 4 [ 2220.514925][T10266] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2220.564976][T10266] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2220.567265][T10279] loop4: detected capacity change from 0 to 4 [ 2220.637790][T10279] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2220.654810][T10266] loop2: detected capacity change from 0 to 4 [ 2220.689376][T10266] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2220.710780][T10279] loop4: detected capacity change from 0 to 4 [ 2220.724531][T10266] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2220.751423][T10279] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:33 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) 21:46:33 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5, r2}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r0, r6}, {}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5}, {}, {r4}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {r4}, {}, {r5, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r2}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {r4}, {}, {0x0, r6}, {r4}, {r1}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {}, {}, {r5}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r4}, {}, {r4}, {}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {0x0, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{r5, 0x80000000, 0x8, 0x2, 0x4, 0x7, 0xbcb7, 0x0, 0x1, 0xff, 0xfb69, 0x7ff, 0x428, 0x7, 0x401}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fd00400000"]) 21:46:33 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000410000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000060600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:33 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:33 executing program 3: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x210d00, 0x60) [ 2221.152147][T10309] loop2: detected capacity change from 0 to 4 [ 2221.171699][T10315] loop4: detected capacity change from 0 to 4 [ 2221.179049][T10309] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2221.203011][T10315] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2221.216731][T10309] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66056ce732a455a57a2cb6"]) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x356dbe9a, 0x5, &(0x7f0000000540)=[{&(0x7f0000000240)="3cd22386db6cf56c3b5c48afb65da9c71beaad24dd4a3cf031b977144fa1d519589c0cfa12300ca10f19f04a933da5edc4", 0x31, 0x101}, {&(0x7f0000000280)="b34d983b4fbc19be1fc847189563d1b320bd82d04ab9daa5415e4f5e380b4447700c983e37b3f13db86fa8afffae209e5966320c8cb49511d11c290e70687f280d4f6ed7b826cf90356e93472911c50d3cbef500318614467fdbd34f9010fa7c0b5de18da44e91ebe8f14ac32ab17b63c5e344b1a502cc1b4cd0e81395693f393088a8b3fc86a69df06d3deee2cf00d83d8f5cef17328b0686191fc01d839c8d842e2b96145953c7a8b3385e4253069f786292e76f90276c1b547ea1607c29892f113c3bd112913ec68e29af9707426a455025824fa8b1e65cc3b557de96054b3d5127480f", 0xe5, 0x1}, {&(0x7f0000000380)="01aafee27a3642fb6c38bc94dfbe7d03fc58f2d67d11eb", 0x17, 0x9}, {&(0x7f00000003c0)="1a58ec799fe4b911a2d526ebd509b8aab6b6750020f4efaa534ed249e37f2a061b7fbc05bfe6c869a3ca99a8dcd1bf1bfd464e63d3a0f302ce3555a1927c074c0ad43b0ca85483c2f4a8ceb6edee95dcaf1f28ea8aef539f119c8c625bdad65feeeb64460aae8e411d18ee2d6041599af08743aeeda17e3e90c3a6feccdd8174162481dd9879fa7d98168c0ee05f1700177416c669f864e5f9b7b2b540286976525db536b73888b5b9ee7c0c9c8bab66f092a2f154bcfdd0757a23fb60d919776cb597f33994d3a0e5", 0xc9, 0x6}, {&(0x7f00000004c0)="21c859527ffb1f173544b0053c266718caf667dc74b97b17a065068ef8fe105f1896ba9f61bdabcbefa4c9e75c482e8067063162beb6dbf6f31cdb3a6349d17e59de6d80e8df6edf53770663bdf9909417ac22b05c68a4a607fd15ee3491a40751586feebf37fa180a78e3f245e9ccd24c09e85d7cc4ea864073", 0x7a, 0x10000}], 0x1001, &(0x7f00000005c0)={[{@data_err_ignore}, {@journal_ioprio}, {@i_version}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}, {@journal_async_commit}, {@grpjquota}, {@dax}, {@quota}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x65, 0x37, 0x36, 0x31, 0x35, 0x0, 0x62], 0x2d, [0x36, 0x63, 0x35, 0x32], 0x2d, [0x65, 0x34, 0x62, 0x61], 0x2d, [0x63, 0x39, 0x65, 0x64], 0x2d, [0x66, 0x62, 0x39, 0x63, 0x62, 0x1b, 0x64, 0x66]}}}]}) accept(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x80) 21:46:33 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:33 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x10000, &(0x7f0000000240)=ANY=[]) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) 21:46:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000068600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2221.293025][T10315] loop4: detected capacity change from 0 to 4 [ 2221.306435][T10309] loop2: detected capacity change from 0 to 4 [ 2221.314962][T10315] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2221.329948][T10309] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000fe805000000000001000040000001400000d2f6655fd2f4ff53ef000000000000", 0x31, 0x400}], 0x0, &(0x7f0000000040)={[], [{@obj_role={'obj_role', 0x3d, '-'}}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0xa1, 0x0) [ 2221.393665][T10309] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2221.413296][T10354] loop4: detected capacity change from 0 to 4 [ 2221.452167][T10354] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2221.566902][T10354] loop4: detected capacity change from 0 to 4 [ 2221.585931][T10354] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:34 executing program 1: ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) 21:46:34 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000011000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0xfffffffc}}, {@noquota}, {@lazytime}]}) 21:46:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600006c600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:34 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2222.170093][T10380] loop2: detected capacity change from 0 to 4 [ 2222.181796][T10384] loop4: detected capacity change from 0 to 4 [ 2222.191204][ C1] scsi_io_completion_action: 10 callbacks suppressed [ 2222.191233][ C1] sd 0:0:1:0: tag#3008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2222.207750][ C1] sd 0:0:1:0: tag#3008 CDB: opcode=0xe5 (vendor) 21:46:34 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x101000, 0x0) syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfe, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000100)="b35209a589b48e118dee609a086c6362173e3efa7cf825b4d5532029dbcf9bb11c508c546bacc62e2d1c3526ab252c81b59ba8a1b666e695dfd789c11ac87136d7ce7d6216149a43e79d6c554564444424a94bdbe53af993c0f47ffea624", 0x5e, 0x3}, {&(0x7f0000000180)="88dcb2ddd004e5a896593f7ae492c17c7fad6d93ba4fabbe9c9fcd4c9f744cf251f49b7ce693d73918bcdfa51bc58e7549f4cb638f85252bfb556a3d277c65ca1dda83575b53032935f8c00d3f7c9a5c02cb688fa803297a4f43d077ccd7bdb908149909bd4045b75ca2677f19753932e581d6cdba", 0x75, 0xa0}, {&(0x7f0000000200)="07cbf89f6fb229cb92f349172b72b2c05ea64f9faddc2825e7e0fffaf54412cc63f624efce11cd114812bb327f1cf1c758a875297a866f5675707778bb72b73dac2d2a65365167e7b2d5e625f60fa9946123571a33fc7712e235987a10e7a9d8b00aca1803aabe", 0x67, 0x800}, {&(0x7f0000000280)="26e503ec0428a71cd8191835412a0cde28469b05cf44673f8ca36a06bf720e9f00b9c6fbe7ec4cebbf665ce6b00cbe8707f5ee70b13aae75", 0x38, 0x400}, {&(0x7f00000002c0)="1e05e3f4a68dec2ea6806cac8653cc0d7ebed910807c0eda6dd939382769de32f9141ec8004fd4b9e98dec96254a9966b505d814e0d5516bf7d52a49624e97a45e25ddd86075d4f3219127cbe7531004881f36747dc8b4c56135421eec8e21d7537dd54df72526518157295cfe4248a9a86ae6f6b0223aca9215f8176d9b73aa5787fca409555bfddb63303c86ef16cde3659e6bf916bd5b90c01c5b6873277b01e7bef84fb2adb2fe056e63c8c105effcc8607049f627bd437e8153bc45df83a6b921b56b8052d8467ba0a0679497c1da731479f2894124447d7b4d8069075b216c4fda2265911a5c3e1c2210fe630aad7f", 0xf2, 0x1ff}], 0x100060, &(0x7f0000000440)={[{'&*}\\[[\xc5-'}, {}, {'\x05/@::\\&]$'}], [{@subj_user={'subj_user', 0x3d, '\'^'}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@smackfsfloor={'smackfsfloor', 0x3d, '(\xe1-'}}, {@seclabel}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_setup(0xfcb, &(0x7f0000000200), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x1) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x0, {0x1, r6}}, 0xc7) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2222.214084][ C1] sd 0:0:1:0: tag#3008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2222.223119][ C1] sd 0:0:1:0: tag#3008 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2222.232163][ C1] sd 0:0:1:0: tag#3008 CDB[20]: 80 19 84 20 e0 6c bb [ 2222.245076][T10380] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:34 executing program 3: sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x904, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x26}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) [ 2222.273934][T10384] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2222.279531][ C0] sd 0:0:1:0: tag#3009 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2222.293076][ C0] sd 0:0:1:0: tag#3009 CDB: opcode=0xe5 (vendor) [ 2222.299427][ C0] sd 0:0:1:0: tag#3009 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2222.308473][ C0] sd 0:0:1:0: tag#3009 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2222.318077][ C0] sd 0:0:1:0: tag#3009 CDB[20]: 80 19 21:46:34 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2222.336751][T10380] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:34 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2222.380770][T10384] loop4: detected capacity change from 0 to 4 [ 2222.399812][T10380] loop2: detected capacity change from 0 to 4 [ 2222.418436][T10384] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2222.438646][T10380] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2222.449582][ C0] sd 0:0:1:0: tag#3015 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2222.459431][ C0] sd 0:0:1:0: tag#3015 CDB: opcode=0xe5 (vendor) [ 2222.465757][ C0] sd 0:0:1:0: tag#3015 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2222.474798][ C0] sd 0:0:1:0: tag#3015 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 21:46:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000074600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2222.483861][ C0] sd 0:0:1:0: tag#3015 CDB[20]: 80 19 84 20 e0 6c bb 21:46:34 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2222.543911][T10380] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2222.566666][T10424] loop4: detected capacity change from 0 to 4 [ 2222.595676][T10424] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2222.635529][ C0] sd 0:0:1:0: tag#3019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2222.645376][ C0] sd 0:0:1:0: tag#3019 CDB: opcode=0xe5 (vendor) [ 2222.651750][ C0] sd 0:0:1:0: tag#3019 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2222.660806][ C0] sd 0:0:1:0: tag#3019 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2222.669878][ C0] sd 0:0:1:0: tag#3019 CDB[20]: 80 19 84 20 e0 6c bb [ 2222.751557][T10424] loop4: detected capacity change from 0 to 4 [ 2222.794162][T10424] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:35 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000012000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:35 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600007a600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2223.103030][T10451] loop2: detected capacity change from 0 to 4 [ 2223.109855][T10452] loop4: detected capacity change from 0 to 4 [ 2223.121837][ C1] sd 0:0:1:0: tag#3050 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2223.131708][ C1] sd 0:0:1:0: tag#3050 CDB: opcode=0xe5 (vendor) [ 2223.138059][ C1] sd 0:0:1:0: tag#3050 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2223.147094][ C1] sd 0:0:1:0: tag#3050 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2223.156129][ C1] sd 0:0:1:0: tag#3050 CDB[20]: 80 19 84 20 e0 6c bb [ 2223.170713][T10452] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2223.190294][ C1] sd 0:0:1:0: tag#3051 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 21:46:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2223.200167][ C1] sd 0:0:1:0: tag#3051 CDB: opcode=0xe5 (vendor) [ 2223.206565][ C1] sd 0:0:1:0: tag#3051 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2223.212363][T10451] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2223.215586][ C1] sd 0:0:1:0: tag#3051 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2223.215607][ C1] sd 0:0:1:0: tag#3051 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2223.241123][T10451] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:35 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2223.297204][T10451] loop2: detected capacity change from 0 to 4 [ 2223.298295][T10452] loop4: detected capacity change from 0 to 4 [ 2223.316408][T10451] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:35 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2223.356597][T10451] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2223.400029][ C0] sd 0:0:1:0: tag#3056 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2223.409911][ C0] sd 0:0:1:0: tag#3056 CDB: opcode=0xe5 (vendor) [ 2223.416291][ C0] sd 0:0:1:0: tag#3056 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2223.425315][ C0] sd 0:0:1:0: tag#3056 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2223.434399][ C0] sd 0:0:1:0: tag#3056 CDB[20]: 80 19 84 20 e0 6c bb [ 2223.435002][T10452] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000020000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2223.475220][ C1] sd 0:0:1:0: tag#3027 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2223.485101][ C1] sd 0:0:1:0: tag#3027 CDB: opcode=0xe5 (vendor) [ 2223.491463][ C1] sd 0:0:1:0: tag#3027 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2223.500514][ C1] sd 0:0:1:0: tag#3027 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2223.509558][ C1] sd 0:0:1:0: tag#3027 CDB[20]: 80 19 21:46:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000001020000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:35 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:35 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000fe600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2223.615719][T10493] loop2: detected capacity change from 0 to 4 [ 2223.664983][T10493] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2223.690646][ C1] sd 0:0:1:0: tag#3034 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2223.700498][ C1] sd 0:0:1:0: tag#3034 CDB: opcode=0xe5 (vendor) [ 2223.706871][ C1] sd 0:0:1:0: tag#3034 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2223.715906][ C1] sd 0:0:1:0: tag#3034 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2223.724934][ C1] sd 0:0:1:0: tag#3034 CDB[20]: 80 19 84 20 e0 6c bb [ 2223.741899][T10508] loop4: detected capacity change from 0 to 4 [ 2223.753997][T10508] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2223.767338][T10493] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:36 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000000400000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2223.859615][T10493] loop2: detected capacity change from 0 to 4 [ 2223.881479][T10493] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2223.903055][T10493] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2223.912890][ C0] sd 0:0:1:0: tag#3038 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2223.914612][T10530] loop4: detected capacity change from 0 to 4 [ 2223.922746][ C0] sd 0:0:1:0: tag#3038 CDB: opcode=0xe5 (vendor) [ 2223.935116][ C0] sd 0:0:1:0: tag#3038 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2223.944162][ C0] sd 0:0:1:0: tag#3038 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2223.953221][ C0] sd 0:0:1:0: tag#3038 CDB[20]: 80 19 84 20 e0 6c bb 21:46:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000022000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2223.967294][T10530] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:36 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2224.081828][T10530] loop4: detected capacity change from 0 to 4 [ 2224.104860][T10541] loop2: detected capacity change from 0 to 4 [ 2224.111629][T10530] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2224.165940][T10541] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2224.182008][T10541] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:36 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000080ffff000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2224.257800][T10541] loop2: detected capacity change from 0 to 4 [ 2224.286250][T10541] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2224.331847][T10541] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2224.335964][T10565] loop4: detected capacity change from 0 to 4 [ 2224.416152][T10565] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:36 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:36 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000025000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2224.476721][T10565] loop4: detected capacity change from 0 to 4 [ 2224.489268][T10565] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2224.554513][T10585] loop2: detected capacity change from 0 to 4 [ 2224.606092][T10585] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2224.627271][T10585] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:37 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000080000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:37 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2224.716280][T10585] loop2: detected capacity change from 0 to 4 [ 2224.728984][T10585] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2224.754641][T10585] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2224.818693][T10609] loop4: detected capacity change from 0 to 4 21:46:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000002e000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2224.863162][T10609] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:37 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2224.915890][T10620] loop2: detected capacity change from 0 to 4 [ 2224.961227][T10609] loop4: detected capacity change from 0 to 4 [ 2224.972246][T10620] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2225.003758][T10609] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2225.034456][T10620] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:37 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000f8ff03000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2225.129540][T10620] loop2: detected capacity change from 0 to 4 [ 2225.145624][T10620] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2225.169643][T10620] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2225.196050][T10650] loop4: detected capacity change from 0 to 4 [ 2225.244367][T10650] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:37 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:37 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2225.329426][T10650] loop4: detected capacity change from 0 to 4 [ 2225.352110][T10650] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:37 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000003f000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000001000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2225.630106][T10678] loop2: detected capacity change from 0 to 4 [ 2225.644869][T10681] loop4: detected capacity change from 0 to 4 [ 2225.654321][T10678] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2225.676283][T10681] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2225.696924][T10678] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2225.760142][T10678] loop2: detected capacity change from 0 to 4 [ 2225.765968][T10681] loop4: detected capacity change from 0 to 4 [ 2225.772592][T10678] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2225.790782][T10681] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2225.794638][T10678] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:38 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:38 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:38 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000002000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000040000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:38 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2225.928299][T10718] loop4: detected capacity change from 0 to 4 [ 2225.946653][T10721] loop2: detected capacity change from 0 to 4 [ 2225.967141][T10718] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:38 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2226.000806][T10721] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2226.048570][T10721] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2226.090645][T10718] loop4: detected capacity change from 0 to 4 [ 2226.104657][T10718] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2226.120318][T10721] loop2: detected capacity change from 0 to 4 21:46:38 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) [ 2226.132505][T10721] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2226.172284][T10721] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:38 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000003000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000080040000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2226.378043][T10760] loop4: detected capacity change from 0 to 4 [ 2226.405808][T10764] loop2: detected capacity change from 0 to 4 [ 2226.436185][T10760] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2226.449996][T10764] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2226.472979][T10764] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2226.493069][T10760] loop4: detected capacity change from 0 to 4 [ 2226.515579][T10760] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000004000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2226.605402][T10764] loop2: detected capacity change from 0 to 4 [ 2226.635328][T10764] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2226.669636][T10789] loop4: detected capacity change from 0 to 4 [ 2226.678149][T10764] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2226.704909][T10789] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2226.807091][T10789] loop4: detected capacity change from 0 to 4 [ 2226.829315][T10789] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:39 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000048000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000005000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2226.977287][T10819] loop2: detected capacity change from 0 to 4 [ 2226.983238][T10820] loop4: detected capacity change from 0 to 4 [ 2227.011655][T10819] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:39 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2227.032678][T10820] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2227.044521][T10819] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2227.126944][T10820] loop4: detected capacity change from 0 to 4 [ 2227.139947][T10819] loop2: detected capacity change from 0 to 4 [ 2227.166295][T10820] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:39 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) [ 2227.185896][T10819] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2227.267872][T10819] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2227.277566][ C1] scsi_io_completion_action: 14 callbacks suppressed [ 2227.277591][ C1] sd 0:0:1:0: tag#3014 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2227.294115][ C1] sd 0:0:1:0: tag#3014 CDB: opcode=0xe5 (vendor) [ 2227.300462][ C1] sd 0:0:1:0: tag#3014 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:46:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000006000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2227.309526][ C1] sd 0:0:1:0: tag#3014 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2227.318573][ C1] sd 0:0:1:0: tag#3014 CDB[20]: 80 19 84 20 e0 6c bb [ 2227.366397][T10856] loop4: detected capacity change from 0 to 4 [ 2227.387032][T10856] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000004c000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:39 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2227.459800][T10856] loop4: detected capacity change from 0 to 4 [ 2227.476587][T10856] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000007000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2227.529184][T10873] loop2: detected capacity change from 0 to 4 [ 2227.564125][T10873] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2227.624182][T10873] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2227.639857][T10882] loop4: detected capacity change from 0 to 4 [ 2227.670312][T10882] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2227.717190][T10873] loop2: detected capacity change from 0 to 4 [ 2227.729845][T10882] loop4: detected capacity change from 0 to 4 [ 2227.743354][T10873] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2227.762716][T10882] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2227.802825][T10873] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000008000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000060000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:40 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2227.931056][T10907] loop4: detected capacity change from 0 to 4 [ 2227.953228][T10908] loop2: detected capacity change from 0 to 4 [ 2227.986266][T10907] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2228.003928][T10908] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:40 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) [ 2228.033961][T10908] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2228.058939][T10907] loop4: detected capacity change from 0 to 4 [ 2228.092690][T10907] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000009000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2228.156143][T10908] loop2: detected capacity change from 0 to 4 [ 2228.173111][T10908] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2228.189112][ C0] sd 0:0:1:0: tag#3055 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2228.198986][ C0] sd 0:0:1:0: tag#3055 CDB: opcode=0xe5 (vendor) 21:46:40 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2228.205316][ C0] sd 0:0:1:0: tag#3055 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2228.214629][ C0] sd 0:0:1:0: tag#3055 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2228.223692][ C0] sd 0:0:1:0: tag#3055 CDB[20]: 80 19 84 20 e0 6c bb [ 2228.226050][T10936] loop4: detected capacity change from 0 to 4 [ 2228.239295][T10908] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2228.287887][ C0] sd 0:0:1:0: tag#3056 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2228.297763][ C0] sd 0:0:1:0: tag#3056 CDB: opcode=0xe5 (vendor) [ 2228.304126][ C0] sd 0:0:1:0: tag#3056 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2228.313183][ C0] sd 0:0:1:0: tag#3056 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2228.317539][T10936] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2228.322225][ C0] sd 0:0:1:0: tag#3056 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:46:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000068000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:40 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2228.442427][T10936] loop4: detected capacity change from 0 to 4 [ 2228.473223][T10936] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2228.477069][T10953] loop2: detected capacity change from 0 to 4 21:46:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000a000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2228.556180][T10953] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2228.593841][T10953] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2228.662607][T10953] loop2: detected capacity change from 0 to 4 [ 2228.679199][T10953] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2228.680166][T10969] loop4: detected capacity change from 0 to 4 [ 2228.718889][T10953] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2228.756515][T10969] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000006c000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2228.840218][T10969] loop4: detected capacity change from 0 to 4 [ 2228.855904][T10969] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000b000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:41 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2228.975203][T10992] loop2: detected capacity change from 0 to 4 [ 2228.983491][T10995] loop4: detected capacity change from 0 to 4 [ 2229.022535][T10995] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.037338][T10992] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2229.075728][T10992] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.098395][T10995] loop4: detected capacity change from 0 to 4 21:46:41 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x0, 0x0, 0x100000fe) [ 2229.125679][T10995] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.149139][T10992] loop2: detected capacity change from 0 to 4 [ 2229.175738][T10992] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2229.193230][T10992] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.214667][ C1] sd 0:0:1:0: tag#3054 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 21:46:41 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000c000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2229.224525][ C1] sd 0:0:1:0: tag#3054 CDB: opcode=0xe5 (vendor) [ 2229.230889][ C1] sd 0:0:1:0: tag#3054 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2229.239947][ C1] sd 0:0:1:0: tag#3054 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2229.249001][ C1] sd 0:0:1:0: tag#3054 CDB[20]: 80 19 84 20 e0 6c bb 21:46:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000074000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2229.353438][ C1] sd 0:0:1:0: tag#3055 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2229.363321][ C1] sd 0:0:1:0: tag#3055 CDB: opcode=0xe5 (vendor) [ 2229.363799][T11033] loop4: detected capacity change from 0 to 4 [ 2229.369682][ C1] sd 0:0:1:0: tag#3055 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2229.384756][ C1] sd 0:0:1:0: tag#3055 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2229.393821][ C1] sd 0:0:1:0: tag#3055 CDB[20]: 80 19 [ 2229.396329][T11036] loop2: detected capacity change from 0 to 4 [ 2229.430152][T11036] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2229.459857][T11033] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.491474][T11036] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.570347][T11033] loop4: detected capacity change from 0 to 4 [ 2229.577956][T11036] loop2: detected capacity change from 0 to 4 [ 2229.597925][T11036] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:41 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2229.628924][T11033] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.658580][T11036] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000d000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000d49ead79000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2229.815143][T11067] loop4: detected capacity change from 0 to 4 [ 2229.836405][T11068] loop2: detected capacity change from 0 to 4 [ 2229.878048][T11067] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.901265][T11068] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2229.979184][T11068] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2229.982338][T11067] loop4: detected capacity change from 0 to 4 [ 2230.009959][T11067] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:42 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:42 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x0, 0x0, 0x100000fe) [ 2230.078395][T11068] loop2: detected capacity change from 0 to 4 [ 2230.089804][T11068] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000e000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2230.134203][T11068] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000007a000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2230.180663][T11096] loop4: detected capacity change from 0 to 4 [ 2230.195125][T11096] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2230.212539][ C0] sd 0:0:1:0: tag#3017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2230.222387][ C0] sd 0:0:1:0: tag#3017 CDB: opcode=0xe5 (vendor) [ 2230.228781][ C0] sd 0:0:1:0: tag#3017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2230.237840][ C0] sd 0:0:1:0: tag#3017 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2230.246894][ C0] sd 0:0:1:0: tag#3017 CDB[20]: 80 19 84 20 e0 6c bb 21:46:42 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2230.340150][T11096] loop4: detected capacity change from 0 to 4 [ 2230.364568][T11096] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600200000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2230.408426][T11115] loop2: detected capacity change from 0 to 4 [ 2230.446758][T11115] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2230.468421][ C0] sd 0:0:1:0: tag#3018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2230.478313][ C0] sd 0:0:1:0: tag#3018 CDB: opcode=0xe5 (vendor) [ 2230.479617][T11115] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2230.484647][ C0] sd 0:0:1:0: tag#3018 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2230.484669][ C0] sd 0:0:1:0: tag#3018 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2230.498556][T11122] loop4: detected capacity change from 0 to 4 [ 2230.502998][ C0] sd 0:0:1:0: tag#3018 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2230.620174][T11122] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600300000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2230.661714][T11115] loop2: detected capacity change from 0 to 4 [ 2230.685835][T11115] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:43 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2230.727934][T11115] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000ffffff85000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2230.779399][T11138] loop4: detected capacity change from 0 to 4 [ 2230.802063][T11138] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600400000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2230.905934][T11151] loop4: detected capacity change from 0 to 4 [ 2230.936613][T11158] loop2: detected capacity change from 0 to 4 [ 2230.951432][T11151] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2230.991563][T11158] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2231.028226][T11158] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2231.068601][T11151] loop4: detected capacity change from 0 to 4 [ 2231.082920][T11151] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:43 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:43 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x0, 0x0, 0x100000fe) [ 2231.124818][T11158] loop2: detected capacity change from 0 to 4 [ 2231.146851][T11158] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:43 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x0, 0x0, 0x100000fe) 21:46:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600500000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2231.178748][T11158] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2231.261238][ C0] sd 0:0:1:0: tag#3014 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2231.271110][ C0] sd 0:0:1:0: tag#3014 CDB: opcode=0xe5 (vendor) [ 2231.277497][ C0] sd 0:0:1:0: tag#3014 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2231.284146][T11190] loop4: detected capacity change from 0 to 4 [ 2231.286562][ C0] sd 0:0:1:0: tag#3014 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2231.301643][ C0] sd 0:0:1:0: tag#3014 CDB[20]: 80 19 84 20 e0 6c bb 21:46:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000ffffff8c000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:43 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2231.430981][T11190] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600600000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2231.545545][ C0] sd 0:0:1:0: tag#3015 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2231.550085][T11205] loop2: detected capacity change from 0 to 4 [ 2231.555421][ C0] sd 0:0:1:0: tag#3015 CDB: opcode=0xe5 (vendor) [ 2231.567789][ C0] sd 0:0:1:0: tag#3015 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2231.576845][ C0] sd 0:0:1:0: tag#3015 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2231.585894][ C0] sd 0:0:1:0: tag#3015 CDB[20]: 80 19 [ 2231.607957][T11206] loop4: detected capacity change from 0 to 4 [ 2231.670259][T11206] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2231.679852][T11205] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2231.693955][T11205] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:44 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2231.777434][T11206] loop4: detected capacity change from 0 to 4 [ 2231.777674][T11205] loop2: detected capacity change from 0 to 4 [ 2231.806207][T11206] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2231.821540][T11205] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600700000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2231.871049][T11205] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000ffffff97000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2231.972018][T11237] loop4: detected capacity change from 0 to 4 [ 2232.012628][T11237] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2232.070838][T11246] loop2: detected capacity change from 0 to 4 [ 2232.107884][T11237] loop4: detected capacity change from 0 to 4 21:46:44 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2232.122184][T11246] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2232.140606][T11237] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:44 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x0) 21:46:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600800000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2232.186682][T11246] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:44 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2232.250642][T11246] loop2: detected capacity change from 0 to 4 [ 2232.269018][ C0] sd 0:0:1:0: tag#3031 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2232.278876][ C0] sd 0:0:1:0: tag#3031 CDB: opcode=0xe5 (vendor) [ 2232.285216][ C0] sd 0:0:1:0: tag#3031 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2232.294284][ C0] sd 0:0:1:0: tag#3031 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2232.303338][ C0] sd 0:0:1:0: tag#3031 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2232.312394][ C0] sd 0:0:1:0: tag#3031 CDB[30]: cf 25 08 ca 84 [ 2232.332572][T11246] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2232.362981][T11246] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2232.366368][T11280] loop4: detected capacity change from 0 to 4 [ 2232.412679][T11280] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000001aa000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2232.467443][T11280] loop4: detected capacity change from 0 to 4 [ 2232.493948][T11280] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600900000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2232.565608][T11296] loop2: detected capacity change from 0 to 4 [ 2232.596263][T11296] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2232.637518][T11296] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2232.668561][T11303] loop4: detected capacity change from 0 to 4 [ 2232.703331][T11303] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2232.746486][T11296] loop2: detected capacity change from 0 to 4 [ 2232.782656][T11296] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:45 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1a, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2232.795786][T11303] loop4: detected capacity change from 0 to 4 [ 2232.819176][T11303] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2232.836674][T11296] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600a00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000001ab000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2232.959258][T11327] loop4: detected capacity change from 0 to 4 [ 2232.991345][T11327] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2233.045932][T11335] loop2: detected capacity change from 0 to 4 [ 2233.077538][T11335] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2233.115837][T11327] loop4: detected capacity change from 0 to 4 [ 2233.134087][T11327] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2233.147502][T11335] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600b00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:45 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x0) 21:46:45 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2233.245525][T11335] loop2: detected capacity change from 0 to 4 [ 2233.254454][T11335] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2233.281569][T11335] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:45 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000edc0000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2233.324077][T11357] loop4: detected capacity change from 0 to 4 [ 2233.362730][T11357] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2233.388595][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 2233.388625][ C1] sd 0:0:1:0: tag#3041 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2233.405106][ C1] sd 0:0:1:0: tag#3041 CDB: opcode=0xe5 (vendor) [ 2233.411476][ C1] sd 0:0:1:0: tag#3041 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2233.420519][ C1] sd 0:0:1:0: tag#3041 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2233.429557][ C1] sd 0:0:1:0: tag#3041 CDB[20]: 80 19 84 20 e0 6c bb [ 2233.477916][T11377] loop2: detected capacity change from 0 to 4 [ 2233.535442][T11357] loop4: detected capacity change from 0 to 4 [ 2233.550088][T11377] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2233.563686][T11357] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2233.576829][T11377] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2233.655299][T11377] loop2: detected capacity change from 0 to 4 21:46:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600c00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2233.703050][T11377] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2233.763629][T11377] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2233.772320][T11398] loop4: detected capacity change from 0 to 4 21:46:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1a, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2233.809135][T11398] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000079ad9ed4000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:46 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x0) [ 2233.900990][T11398] loop4: detected capacity change from 0 to 4 [ 2233.909798][T11398] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600d00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2233.983399][T11417] loop2: detected capacity change from 0 to 4 [ 2234.028120][T11417] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2234.044041][T11426] loop4: detected capacity change from 0 to 4 [ 2234.065904][T11426] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600e00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2234.092343][T11417] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2234.103435][ C1] sd 0:0:1:0: tag#3030 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2234.113344][ C1] sd 0:0:1:0: tag#3030 CDB: opcode=0xe5 (vendor) [ 2234.119721][ C1] sd 0:0:1:0: tag#3030 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2234.128759][ C1] sd 0:0:1:0: tag#3030 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2234.137797][ C1] sd 0:0:1:0: tag#3030 CDB[20]: 80 19 84 20 e0 6c bb [ 2234.179831][T11417] loop2: detected capacity change from 0 to 4 [ 2234.204724][T11439] loop4: detected capacity change from 0 to 4 [ 2234.213462][T11417] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2234.232649][T11439] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2234.298980][T11417] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2234.299666][T11439] loop4: detected capacity change from 0 to 4 21:46:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000ffffffda000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2234.347885][T11439] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:46 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:46 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600f00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2234.460812][T11458] loop2: detected capacity change from 0 to 4 [ 2234.473332][T11466] loop4: detected capacity change from 0 to 4 [ 2234.509166][T11466] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2234.515348][T11458] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2234.560880][T11458] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2234.586056][T11466] loop4: detected capacity change from 0 to 4 [ 2234.610785][T11466] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2234.662213][T11458] loop2: detected capacity change from 0 to 4 21:46:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000601000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2234.707729][T11458] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2234.764892][T11458] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2234.777785][T11491] loop4: detected capacity change from 0 to 4 [ 2234.792194][T11491] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fffffff6000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:47 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1a, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2234.845074][T11491] loop4: detected capacity change from 0 to 4 [ 2234.885426][T11491] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000601100000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2234.937101][T11509] loop2: detected capacity change from 0 to 4 [ 2235.000257][T11509] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2235.024419][T11509] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2235.040989][T11518] loop4: detected capacity change from 0 to 4 21:46:47 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2235.071067][T11518] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2235.097562][T11509] loop2: detected capacity change from 0 to 4 [ 2235.121151][T11509] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2235.160102][T11509] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2235.174435][T11518] loop4: detected capacity change from 0 to 4 [ 2235.198134][T11518] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fffffdf9000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000601200000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2235.344647][T11548] loop2: detected capacity change from 0 to 4 [ 2235.377007][T11552] loop4: detected capacity change from 0 to 4 [ 2235.391695][T11548] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2235.417473][T11552] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2235.442234][T11548] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2235.488546][T11552] loop4: detected capacity change from 0 to 4 [ 2235.507451][T11552] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2235.520934][T11548] loop2: detected capacity change from 0 to 4 21:46:47 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:47 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2235.555479][T11548] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2235.580271][T11548] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000602200000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000001fa000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2235.684146][T11578] loop4: detected capacity change from 0 to 4 [ 2235.735660][T11578] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1e, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c8756", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2235.823713][T11589] loop2: detected capacity change from 0 to 4 [ 2235.836255][T11578] loop4: detected capacity change from 0 to 4 [ 2235.858806][T11578] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2235.903421][T11589] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000602500000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2235.957336][T11589] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2236.019015][T11589] loop2: detected capacity change from 0 to 4 [ 2236.060921][T11589] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2236.076541][T11608] loop4: detected capacity change from 0 to 4 [ 2236.099970][T11608] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fffffdfd000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2236.118832][T11589] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:48 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2236.171310][T11608] loop4: detected capacity change from 0 to 4 [ 2236.189957][T11608] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2236.239745][T11623] loop2: detected capacity change from 0 to 4 [ 2236.276705][ C1] sd 0:0:1:0: tag#3029 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2236.286584][ C1] sd 0:0:1:0: tag#3029 CDB: opcode=0xe5 (vendor) [ 2236.292923][ C1] sd 0:0:1:0: tag#3029 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2236.301970][ C1] sd 0:0:1:0: tag#3029 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2236.311015][ C1] sd 0:0:1:0: tag#3029 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2236.320069][ C1] sd 0:0:1:0: tag#3029 CDB[30]: cf 25 08 ca 84 [ 2236.322526][T11623] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000602e00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2236.417942][T11638] loop4: detected capacity change from 0 to 4 [ 2236.435421][T11623] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2236.478543][T11638] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2236.548168][T11623] loop2: detected capacity change from 0 to 4 [ 2236.584644][T11623] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:48 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fffffffd000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2236.616733][T11623] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2236.619684][T11638] loop4: detected capacity change from 0 to 4 21:46:49 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2236.683484][T11638] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000604800000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2236.772392][T11664] loop2: detected capacity change from 0 to 4 [ 2236.784154][T11664] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:49 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1e, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c8756", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2236.838829][T11664] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2236.866951][T11670] loop4: detected capacity change from 0 to 4 [ 2236.907469][T11670] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2236.929352][T11664] loop2: detected capacity change from 0 to 4 [ 2236.963290][T11664] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2236.995467][T11664] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2237.021330][T11670] loop4: detected capacity change from 0 to 4 [ 2237.031491][T11670] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fffffffe000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000604c00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2237.142123][T11701] loop2: detected capacity change from 0 to 4 [ 2237.170263][T11703] loop4: detected capacity change from 0 to 4 [ 2237.185683][T11701] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:49 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2237.225473][T11701] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2237.237935][T11703] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2237.279917][T11701] loop2: detected capacity change from 0 to 4 [ 2237.285158][ C1] sd 0:0:1:0: tag#3027 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2237.295948][ C1] sd 0:0:1:0: tag#3027 CDB: opcode=0xe5 (vendor) [ 2237.303020][ C1] sd 0:0:1:0: tag#3027 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2237.312075][ C1] sd 0:0:1:0: tag#3027 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2237.321153][ C1] sd 0:0:1:0: tag#3027 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2237.330209][ C1] sd 0:0:1:0: tag#3027 CDB[30]: cf 25 08 ca 84 [ 2237.338789][T11701] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2237.477231][T11701] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2237.507498][T11703] loop4: detected capacity change from 0 to 4 21:46:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000fff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2237.519883][T11703] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000606000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2237.652815][T11733] loop4: detected capacity change from 0 to 4 [ 2237.674961][T11738] loop2: detected capacity change from 0 to 4 21:46:50 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2237.730819][T11733] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2237.741573][T11738] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2237.788900][T11738] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:50 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000606800000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:50 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1e, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c8756", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2237.829635][T11738] loop2: detected capacity change from 0 to 4 [ 2237.873233][T11738] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2237.893820][T11738] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2237.903740][T11757] loop4: detected capacity change from 0 to 4 [ 2237.920037][T11757] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2237.931915][ C1] sd 0:0:1:0: tag#3020 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2237.941800][ C1] sd 0:0:1:0: tag#3020 CDB: opcode=0xe5 (vendor) [ 2237.948165][ C1] sd 0:0:1:0: tag#3020 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2237.957241][ C1] sd 0:0:1:0: tag#3020 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 21:46:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fffffbff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2237.966295][ C1] sd 0:0:1:0: tag#3020 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2237.975335][ C1] sd 0:0:1:0: tag#3020 CDB[30]: cf 25 08 ca 84 21:46:50 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2238.081710][T11757] loop4: detected capacity change from 0 to 4 [ 2238.101078][T11757] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2238.121189][T11774] loop2: detected capacity change from 0 to 4 [ 2238.161612][T11774] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000606c00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2238.206862][ C0] sd 0:0:1:0: tag#3038 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2238.216731][ C0] sd 0:0:1:0: tag#3038 CDB: opcode=0xe5 (vendor) [ 2238.223082][ C0] sd 0:0:1:0: tag#3038 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2238.232151][ C0] sd 0:0:1:0: tag#3038 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2238.241199][ C0] sd 0:0:1:0: tag#3038 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2238.250259][ C0] sd 0:0:1:0: tag#3038 CDB[30]: cf 25 08 ca 84 [ 2238.307478][T11787] loop4: detected capacity change from 0 to 4 [ 2238.467802][T11774] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2238.484555][T11787] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:50 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2238.564231][T11787] loop4: detected capacity change from 0 to 4 [ 2238.567466][T11774] loop2: detected capacity change from 0 to 4 [ 2238.591116][T11787] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2238.601531][T11774] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2238.627146][T11774] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2238.644342][ C0] sd 0:0:1:0: tag#3050 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2238.654417][ C0] sd 0:0:1:0: tag#3050 CDB: opcode=0xe5 (vendor) [ 2238.660795][ C0] sd 0:0:1:0: tag#3050 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2238.669852][ C0] sd 0:0:1:0: tag#3050 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2238.678948][ C0] sd 0:0:1:0: tag#3050 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2238.688008][ C0] sd 0:0:1:0: tag#3050 CDB[30]: cf 25 08 ca 84 21:46:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000607400000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000e0ffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:51 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x20, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:51 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1e, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c8756", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2238.897638][T11807] loop2: detected capacity change from 0 to 4 [ 2238.913786][T11814] loop4: detected capacity change from 0 to 4 [ 2238.928428][T11807] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2238.943145][T11814] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000607a00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2239.000028][T11807] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2239.077341][T11807] loop2: detected capacity change from 0 to 4 [ 2239.087877][T11831] loop4: detected capacity change from 0 to 4 [ 2239.105281][T11807] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:51 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x1e, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c8756", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2239.135084][T11831] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2239.151650][T11807] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fffbffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2239.239024][T11831] loop4: detected capacity change from 0 to 4 [ 2239.258409][T11831] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2239.305779][T11855] loop2: detected capacity change from 0 to 4 [ 2239.325402][T11855] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060fe00000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2239.360917][T11855] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2239.430067][T11855] loop2: detected capacity change from 0 to 4 [ 2239.449759][T11855] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2239.460241][T11869] loop4: detected capacity change from 0 to 4 [ 2239.491518][T11855] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2239.503188][T11869] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000f9fdffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2239.590923][T11869] loop4: detected capacity change from 0 to 4 [ 2239.621950][T11869] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:52 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600402000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2239.718882][T11886] loop2: detected capacity change from 0 to 4 [ 2239.754175][T11886] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2239.767409][ C0] sd 0:0:1:0: tag#3038 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2239.777266][ C0] sd 0:0:1:0: tag#3038 CDB: opcode=0xe5 (vendor) [ 2239.783597][ C0] sd 0:0:1:0: tag#3038 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2239.792702][ C0] sd 0:0:1:0: tag#3038 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2239.801770][ C0] sd 0:0:1:0: tag#3038 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2239.810932][ C0] sd 0:0:1:0: tag#3038 CDB[30]: cf 25 08 ca 84 [ 2239.828231][T11900] loop4: detected capacity change from 0 to 4 [ 2239.935047][T11886] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2239.950938][T11900] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:52 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x20, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2239.977544][T11886] loop2: detected capacity change from 0 to 4 [ 2239.999444][T11886] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:52 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2240.043429][T11900] loop4: detected capacity change from 0 to 4 [ 2240.046351][T11886] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2240.077358][T11900] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600003000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fdfdffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2240.223792][T11926] loop4: detected capacity change from 0 to 4 21:46:52 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2240.268127][T11926] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2240.295491][T11936] loop2: detected capacity change from 0 to 4 [ 2240.325581][T11936] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2240.345021][ C1] sd 0:0:1:0: tag#3048 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2240.348580][T11936] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2240.354887][ C1] sd 0:0:1:0: tag#3048 CDB: opcode=0xe5 (vendor) [ 2240.370483][ C1] sd 0:0:1:0: tag#3048 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2240.379638][ C1] sd 0:0:1:0: tag#3048 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2240.388687][ C1] sd 0:0:1:0: tag#3048 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2240.397749][ C1] sd 0:0:1:0: tag#3048 CDB[30]: cf 25 08 ca 84 [ 2240.418311][T11926] loop4: detected capacity change from 0 to 4 [ 2240.445039][T11926] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600204000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:53 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2240.658258][T11936] loop2: detected capacity change from 0 to 4 [ 2240.679697][T11936] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2240.701515][T11958] loop4: detected capacity change from 0 to 4 [ 2240.733246][T11936] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2240.742662][T11958] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2240.778147][T11958] loop4: detected capacity change from 0 to 4 [ 2240.790919][ C0] sd 0:0:1:0: tag#3061 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2240.800806][ C0] sd 0:0:1:0: tag#3061 CDB: opcode=0xe5 (vendor) [ 2240.807193][ C0] sd 0:0:1:0: tag#3061 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2240.816241][ C0] sd 0:0:1:0: tag#3061 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2240.825290][ C0] sd 0:0:1:0: tag#3061 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2240.834332][ C0] sd 0:0:1:0: tag#3061 CDB[30]: cf 25 08 ca 84 21:46:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00007fffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2240.994125][T11958] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600604000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:53 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x20, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:53 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2241.110115][T11981] loop2: detected capacity change from 0 to 4 [ 2241.144763][T11981] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2241.179551][T11991] loop4: detected capacity change from 0 to 4 [ 2241.197662][T11981] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2241.209950][T11991] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:53 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2241.279530][T11981] loop2: detected capacity change from 0 to 4 [ 2241.290647][T11991] loop4: detected capacity change from 0 to 4 [ 2241.315110][T11981] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2241.332401][T11991] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2241.342453][T11981] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2241.376430][ C0] sd 0:0:1:0: tag#3052 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2241.386312][ C0] sd 0:0:1:0: tag#3052 CDB: opcode=0xe5 (vendor) [ 2241.392655][ C0] sd 0:0:1:0: tag#3052 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2241.401700][ C0] sd 0:0:1:0: tag#3052 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2241.410747][ C0] sd 0:0:1:0: tag#3052 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 2241.419790][ C0] sd 0:0:1:0: tag#3052 CDB[30]: cf 25 08 ca 84 21:46:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000601004000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000085ffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:53 executing program 1 (fault-call:13 fault-nth:0): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2241.664273][T12027] loop2: detected capacity change from 0 to 4 [ 2241.673112][T12025] loop4: detected capacity change from 0 to 4 [ 2241.687469][T12027] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2241.707433][ C1] sd 0:0:1:0: tag#3011 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2241.717316][ C1] sd 0:0:1:0: tag#3011 CDB: opcode=0xe5 (vendor) [ 2241.723654][ C1] sd 0:0:1:0: tag#3011 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2241.732740][ C1] sd 0:0:1:0: tag#3011 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2241.741792][ C1] sd 0:0:1:0: tag#3011 CDB[20]: 80 19 84 20 e0 6c bb [ 2241.760606][T12027] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2241.773981][T12025] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2241.788899][T12027] loop2: detected capacity change from 0 to 4 [ 2241.798842][T12027] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2241.810568][T12027] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00008cffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2241.846824][T12039] FAULT_INJECTION: forcing a failure. [ 2241.846824][T12039] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.859564][T12039] CPU: 0 PID: 12039 Comm: syz-executor.1 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2241.869738][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2241.879799][T12039] Call Trace: [ 2241.883078][T12039] dump_stack_lvl+0xd6/0x122 [ 2241.887669][T12039] dump_stack+0x11/0x1b [ 2241.891924][T12039] should_fail+0x23c/0x250 [ 2241.896354][T12039] ? ext4_init_io_end+0x2d/0xa0 [ 2241.901203][T12039] __should_failslab+0x81/0x90 [ 2241.905972][T12039] should_failslab+0x5/0x20 [ 2241.910543][T12039] kmem_cache_alloc+0x4f/0x300 [ 2241.915311][T12039] ext4_init_io_end+0x2d/0xa0 [ 2241.920017][T12039] ext4_writepages+0x6e5/0x1d70 [ 2241.924873][T12039] ? avc_has_perm+0xd5/0x160 [ 2241.928866][T12047] loop2: detected capacity change from 0 to 4 [ 2241.929463][T12039] ? rmqueue_pcplist+0x14e/0x1e0 [ 2241.940449][T12039] ? rmqueue+0x4a/0xcd0 [ 2241.944643][T12039] ? get_page_from_freelist+0x55e/0x830 [ 2241.950198][T12039] ? ext4_readpage+0x140/0x140 [ 2241.955011][T12039] do_writepages+0x26b/0x3c0 [ 2241.959681][T12039] ? _kstrtoull+0x301/0x320 [ 2241.960691][T12047] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2241.964247][T12039] filemap_write_and_wait_range+0x238/0x3c0 [ 2241.964276][T12039] ext4_punch_hole+0x14c/0x9d0 [ 2241.983990][T12039] ? proc_fail_nth_write+0x127/0x150 [ 2241.989370][T12039] ? avc_policy_seqno+0x22/0x30 [ 2241.994222][T12039] ? ext4_fc_start_update+0x58/0x1c0 [ 2241.999513][T12039] ext4_fallocate+0xea/0x4d0 [ 2242.000899][T12047] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2242.004095][T12039] ? ext4_ext_truncate+0x170/0x170 [ 2242.004116][T12039] vfs_fallocate+0x459/0x6a0 [ 2242.023048][T12039] __x64_sys_fallocate+0x75/0xc0 [ 2242.027990][T12039] do_syscall_64+0x44/0xa0 [ 2242.032413][T12039] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2242.038397][T12039] RIP: 0033:0x7f238f4c9739 [ 2242.042814][T12039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.062512][T12039] RSP: 002b:00007f238d220188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2242.070930][T12039] RAX: ffffffffffffffda RBX: 00007f238f5ce038 RCX: 00007f238f4c9739 [ 2242.078987][T12039] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2242.086944][T12039] RBP: 00007f238d2201d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.094906][T12039] R10: 00000000100000fe R11: 0000000000000246 R12: 0000000000000001 [ 2242.102873][T12039] R13: 00007ffe0dbcbfbf R14: 00007f238d220300 R15: 0000000000022000 21:46:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600005000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2242.169481][T12047] loop2: detected capacity change from 0 to 4 [ 2242.184166][T12047] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:54 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x71) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:54 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2242.265082][T12047] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2242.286343][T12064] loop4: detected capacity change from 0 to 4 [ 2242.311644][T12064] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2242.348210][ C1] sd 0:0:1:0: tag#3070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2242.358195][ C1] sd 0:0:1:0: tag#3070 CDB: opcode=0xe5 (vendor) 21:46:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000097ffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2242.364530][ C1] sd 0:0:1:0: tag#3070 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2242.373582][ C1] sd 0:0:1:0: tag#3070 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2242.382629][ C1] sd 0:0:1:0: tag#3070 CDB[20]: 80 [ 2242.486424][T12064] loop4: detected capacity change from 0 to 4 [ 2242.510278][T12064] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2242.528187][T12083] loop2: detected capacity change from 0 to 4 21:46:54 executing program 0 (fault-call:12 fault-nth:0): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:54 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600006000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2242.567163][T12083] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2242.599091][T12083] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2242.654411][ C1] sd 0:0:1:0: tag#3016 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2242.664276][ C1] sd 0:0:1:0: tag#3016 CDB: opcode=0xe5 (vendor) [ 2242.670645][ C1] sd 0:0:1:0: tag#3016 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2242.675140][T12096] loop4: detected capacity change from 0 to 4 [ 2242.679699][ C1] sd 0:0:1:0: tag#3016 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2242.695029][ C1] sd 0:0:1:0: tag#3016 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2242.717788][T12096] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2242.741490][ C0] sd 0:0:1:0: tag#3017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2242.751348][ C0] sd 0:0:1:0: tag#3017 CDB: opcode=0xe5 (vendor) [ 2242.757731][ C0] sd 0:0:1:0: tag#3017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2242.766776][ C0] sd 0:0:1:0: tag#3017 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2242.775836][ C0] sd 0:0:1:0: tag#3017 CDB[20]: 80 19 84 20 e0 6c bb [ 2242.786208][T12100] FAULT_INJECTION: forcing a failure. [ 2242.786208][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.794043][T12083] loop2: detected capacity change from 0 to 4 [ 2242.798901][T12100] CPU: 0 PID: 12100 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2242.815112][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2242.825162][T12100] Call Trace: [ 2242.828438][T12100] dump_stack_lvl+0xd6/0x122 [ 2242.833032][T12100] dump_stack+0x11/0x1b [ 2242.837186][T12100] should_fail+0x23c/0x250 [ 2242.841631][T12100] ? ext4_init_io_end+0x2d/0xa0 [ 2242.846481][T12100] __should_failslab+0x81/0x90 [ 2242.851248][T12100] should_failslab+0x5/0x20 [ 2242.855753][T12100] kmem_cache_alloc+0x4f/0x300 [ 2242.860541][T12100] ext4_init_io_end+0x2d/0xa0 [ 2242.865219][T12100] ext4_writepages+0x6e5/0x1d70 [ 2242.870152][T12100] ? avc_has_perm+0xd5/0x160 [ 2242.874765][T12100] ? rmqueue_pcplist+0x14e/0x1e0 [ 2242.879704][T12100] ? __perf_event_header__init_id+0x28b/0x2d0 [ 2242.885783][T12100] ? perf_swevent_hrtimer+0x2cc/0x300 [ 2242.891221][T12100] ? ext4_readpage+0x140/0x140 [ 2242.895985][T12100] do_writepages+0x26b/0x3c0 [ 2242.900578][T12100] filemap_write_and_wait_range+0x238/0x3c0 [ 2242.906593][T12100] ext4_punch_hole+0x14c/0x9d0 [ 2242.911356][T12100] ? avc_policy_seqno+0x22/0x30 [ 2242.916208][T12100] ? ext4_fc_start_update+0x58/0x1c0 [ 2242.921558][T12100] ext4_fallocate+0xea/0x4d0 [ 2242.926144][T12100] ? ext4_ext_truncate+0x170/0x170 [ 2242.931254][T12100] vfs_fallocate+0x459/0x6a0 [ 2242.935910][T12100] __x64_sys_fallocate+0x75/0xc0 [ 2242.940919][T12100] do_syscall_64+0x44/0xa0 [ 2242.945403][T12100] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2242.951300][T12100] RIP: 0033:0x7f73fde35739 [ 2242.955709][T12100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.975317][T12100] RSP: 002b:00007f73fbb8c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2242.983730][T12100] RAX: ffffffffffffffda RBX: 00007f73fdf3a038 RCX: 00007f73fde35739 [ 2242.991705][T12100] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2242.999825][T12100] RBP: 00007f73fbb8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.007795][T12100] R10: 00000000100000fe R11: 0000000000000246 R12: 0000000000000001 [ 2243.015763][T12100] R13: 00007fff4dbcc94f R14: 00007f73fbb8c300 R15: 0000000000022000 [ 2243.029131][T12083] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2243.056538][T12083] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2243.071375][T12096] loop4: detected capacity change from 0 to 4 [ 2243.102825][T12096] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000daffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600406000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2243.252911][T12125] loop2: detected capacity change from 0 to 4 [ 2243.257033][T12126] loop4: detected capacity change from 0 to 4 [ 2243.271883][T12125] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:55 executing program 3 (fault-call:12 fault-nth:0): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2243.301007][T12125] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2243.314348][T12126] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:55 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2243.367479][T12125] loop2: detected capacity change from 0 to 4 [ 2243.375380][T12126] loop4: detected capacity change from 0 to 4 [ 2243.398806][T12126] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2243.409307][T12125] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2243.430479][T12125] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2243.451177][ C1] sd 0:0:1:0: tag#3011 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2243.461047][ C1] sd 0:0:1:0: tag#3011 CDB: opcode=0xe5 (vendor) 21:46:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600007000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2243.467414][ C1] sd 0:0:1:0: tag#3011 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2243.476475][ C1] sd 0:0:1:0: tag#3011 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2243.485529][ C1] sd 0:0:1:0: tag#3011 CDB[20]: 80 21:46:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000f6ffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:56 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2243.651426][T12155] loop4: detected capacity change from 0 to 4 21:46:56 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x2, 0x0, 0x100000fe) [ 2243.705207][T12155] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2243.752945][T12155] loop4: detected capacity change from 0 to 4 [ 2243.763479][T12167] loop2: detected capacity change from 0 to 4 [ 2243.781878][ C0] sd 0:0:1:0: tag#3026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2243.791760][ C0] sd 0:0:1:0: tag#3026 CDB: opcode=0xe5 (vendor) [ 2243.798171][ C0] sd 0:0:1:0: tag#3026 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2243.807232][ C0] sd 0:0:1:0: tag#3026 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2243.816291][ C0] sd 0:0:1:0: tag#3026 CDB[20]: 80 19 84 20 e0 6c bb [ 2243.871741][T12167] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2243.881754][T12155] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2243.898469][T12167] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:56 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600009000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2243.978205][T12167] loop2: detected capacity change from 0 to 4 [ 2243.993036][ C1] sd 0:0:1:0: tag#3030 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2244.002898][ C1] sd 0:0:1:0: tag#3030 CDB: opcode=0xe5 (vendor) [ 2244.004840][T12167] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2244.009249][ C1] sd 0:0:1:0: tag#3030 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2244.027354][ C1] sd 0:0:1:0: tag#3030 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2244.036409][ C1] sd 0:0:1:0: tag#3030 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2244.072089][T12191] loop4: detected capacity change from 0 to 4 [ 2244.112045][T12191] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2244.141618][T12167] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000fdffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2244.259862][T12191] loop4: detected capacity change from 0 to 4 [ 2244.284577][T12191] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:56 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:46:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2244.373360][T12208] loop2: detected capacity change from 0 to 4 [ 2244.443730][T12208] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2244.482266][T12208] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2244.491283][T12221] loop4: detected capacity change from 0 to 4 [ 2244.538699][T12221] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2244.549046][ C1] sd 0:0:1:0: tag#3056 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2244.558912][ C1] sd 0:0:1:0: tag#3056 CDB: opcode=0xe5 (vendor) [ 2244.565272][ C1] sd 0:0:1:0: tag#3056 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2244.574296][ C1] sd 0:0:1:0: tag#3056 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2244.583436][ C1] sd 0:0:1:0: tag#3056 CDB[20]: 80 [ 2244.594805][T12208] loop2: detected capacity change from 0 to 4 [ 2244.617876][T12208] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2244.675896][T12208] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2244.683892][T12221] loop4: detected capacity change from 0 to 4 [ 2244.697548][T12221] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:57 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x2, 0x0, 0x100000fe) 21:46:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000feffffff000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2244.788923][ C1] sd 0:0:1:0: tag#3017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2244.798789][ C1] sd 0:0:1:0: tag#3017 CDB: opcode=0xe5 (vendor) [ 2244.805162][ C1] sd 0:0:1:0: tag#3017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2244.814183][ C1] sd 0:0:1:0: tag#3017 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2244.823239][ C1] sd 0:0:1:0: tag#3017 CDB[20]: 80 19 84 20 e0 6c bb 21:46:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000b000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:57 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x2, 0x0, 0x100000fe) [ 2244.978224][T12257] loop4: detected capacity change from 0 to 4 [ 2244.981935][T12258] loop2: detected capacity change from 0 to 4 [ 2245.008889][T12257] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:57 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x4, 0x0, 0x100000fe) [ 2245.034374][T12258] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2245.065987][ C1] sd 0:0:1:0: tag#3042 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2245.066241][T12258] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2245.075843][ C1] sd 0:0:1:0: tag#3042 CDB: opcode=0xe5 (vendor) [ 2245.091454][ C1] sd 0:0:1:0: tag#3042 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2245.098293][ C0] sd 0:0:1:0: tag#3043 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2245.100497][ C1] sd 0:0:1:0: tag#3042 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2245.110309][ C0] sd 0:0:1:0: tag#3043 CDB: opcode=0xe5 (vendor) [ 2245.119318][ C1] sd 0:0:1:0: tag#3042 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2245.125626][ C0] sd 0:0:1:0: tag#3043 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2245.142876][ C0] sd 0:0:1:0: tag#3043 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2245.151945][ C0] sd 0:0:1:0: tag#3043 CDB[20]: 80 19 84 20 e0 6c bb [ 2245.313664][T12257] loop4: detected capacity change from 0 to 4 [ 2245.331365][T12258] loop2: detected capacity change from 0 to 4 [ 2245.349929][T12257] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2245.362051][T12258] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2245.400104][T12258] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000000010000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:57 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2245.490320][T12290] loop4: detected capacity change from 0 to 4 [ 2245.525692][T12290] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2245.560143][T12300] loop2: detected capacity change from 0 to 4 [ 2245.597892][T12300] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2245.599125][T12290] loop4: detected capacity change from 0 to 4 [ 2245.622620][T12300] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2245.652314][T12290] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2245.658041][ C0] sd 0:0:1:0: tag#3067 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2245.671464][ C0] sd 0:0:1:0: tag#3067 CDB: opcode=0xe5 (vendor) [ 2245.677824][ C0] sd 0:0:1:0: tag#3067 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2245.686903][ C0] sd 0:0:1:0: tag#3067 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2245.696036][ C0] sd 0:0:1:0: tag#3067 CDB[20]: 80 19 [ 2245.791695][ C1] sd 0:0:1:0: tag#3017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2245.801588][ C1] sd 0:0:1:0: tag#3017 CDB: opcode=0xe5 (vendor) [ 2245.807946][ C1] sd 0:0:1:0: tag#3017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2245.817016][ C1] sd 0:0:1:0: tag#3017 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2245.826060][ C1] sd 0:0:1:0: tag#3017 CDB[20]: 80 19 84 20 e0 6c bb [ 2245.836090][ C0] sd 0:0:1:0: tag#3018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2245.845955][ C0] sd 0:0:1:0: tag#3018 CDB: opcode=0xe5 (vendor) [ 2245.852307][ C0] sd 0:0:1:0: tag#3018 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2245.861376][ C0] sd 0:0:1:0: tag#3018 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2245.870433][ C0] sd 0:0:1:0: tag#3018 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:46:58 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x4, 0x0, 0x100000fe) [ 2245.931221][T12300] loop2: detected capacity change from 0 to 4 [ 2245.959715][ C1] sd 0:0:1:0: tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2245.969579][ C1] sd 0:0:1:0: tag#3025 CDB: opcode=0xe5 (vendor) 21:46:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000d000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2245.975964][ C1] sd 0:0:1:0: tag#3025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2245.985005][ C1] sd 0:0:1:0: tag#3025 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2245.994039][ C1] sd 0:0:1:0: tag#3025 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2246.002931][T12300] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:58 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x4, 0x0, 0x100000fe) 21:46:58 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xa, 0x0, 0x100000fe) [ 2246.041118][T12300] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2246.067336][T12334] loop4: detected capacity change from 0 to 4 [ 2246.086488][T12334] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000000030000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2246.157095][T12334] loop4: detected capacity change from 0 to 4 [ 2246.179339][T12334] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000e000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2246.230692][T12356] loop2: detected capacity change from 0 to 4 [ 2246.268501][T12356] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2246.328242][T12356] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2246.338741][T12364] loop4: detected capacity change from 0 to 4 [ 2246.386394][T12364] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2246.416122][T12356] loop2: detected capacity change from 0 to 4 [ 2246.439457][T12356] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2246.457552][T12364] loop4: detected capacity change from 0 to 4 [ 2246.489019][T12364] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2246.515357][T12356] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000f000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:46:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000000040000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:58 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2246.632922][T12384] loop4: detected capacity change from 0 to 4 [ 2246.678637][T12384] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2246.692457][T12398] loop2: detected capacity change from 0 to 4 21:46:59 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xb, 0x0, 0x100000fe) [ 2246.723021][T12398] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2246.735047][T12398] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2246.752628][T12384] loop4: detected capacity change from 0 to 4 [ 2246.769342][T12384] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600410000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2246.842712][T12398] loop2: detected capacity change from 0 to 4 [ 2246.881248][T12398] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2246.899118][T12419] loop4: detected capacity change from 0 to 4 [ 2246.924355][T12398] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2246.934213][T12419] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000000520000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2247.028631][T12419] loop4: detected capacity change from 0 to 4 [ 2247.049263][T12419] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2247.091477][T12439] loop2: detected capacity change from 0 to 4 [ 2247.118615][T12439] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:46:59 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xb, 0x0, 0x100000fe) 21:46:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000602010000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2247.157024][T12439] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2247.218346][T12439] loop2: detected capacity change from 0 to 4 [ 2247.238048][T12439] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2247.256962][T12457] loop4: detected capacity change from 0 to 4 21:46:59 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xb, 0x0, 0x100000fe) [ 2247.279423][T12439] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2247.297497][T12457] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000020000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:46:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600011000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2247.376783][T12457] loop4: detected capacity change from 0 to 4 [ 2247.395416][T12457] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2247.417035][T12475] loop2: detected capacity change from 0 to 4 [ 2247.459170][T12475] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2247.514709][T12475] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2247.515565][T12485] loop4: detected capacity change from 0 to 4 [ 2247.554603][T12485] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:46:59 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2247.627384][T12475] loop2: detected capacity change from 0 to 4 [ 2247.635060][T12485] loop4: detected capacity change from 0 to 4 [ 2247.636668][T12475] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2247.674936][T12485] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2247.676859][T12475] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600012000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:00 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xc, 0x0, 0x100000fe) 21:47:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000030000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2247.830324][T12513] loop4: detected capacity change from 0 to 4 [ 2247.865515][T12513] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2247.925085][T12526] loop2: detected capacity change from 0 to 4 [ 2247.961095][T12513] loop4: detected capacity change from 0 to 4 [ 2247.983097][T12526] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2248.005453][T12513] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.036465][T12526] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600020000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2248.129344][T12526] loop2: detected capacity change from 0 to 4 [ 2248.148150][T12526] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2248.154979][T12548] loop4: detected capacity change from 0 to 4 [ 2248.183318][T12548] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.221749][T12526] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000040000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:00 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xc, 0x0, 0x100000fe) [ 2248.292062][T12548] loop4: detected capacity change from 0 to 4 [ 2248.337209][T12548] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.339988][T12565] loop2: detected capacity change from 0 to 4 21:47:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000601020000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:00 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xc, 0x0, 0x100000fe) [ 2248.390439][T12565] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2248.422526][T12565] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.465401][T12579] loop4: detected capacity change from 0 to 4 [ 2248.485921][T12565] loop2: detected capacity change from 0 to 4 [ 2248.497362][T12579] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.522998][T12565] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2248.557043][T12565] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000050000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2248.587742][T12579] loop4: detected capacity change from 0 to 4 [ 2248.611545][T12579] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:00 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2248.681076][T12605] loop2: detected capacity change from 0 to 4 [ 2248.713933][T12605] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600022000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2248.727860][T12605] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.794201][T12605] loop2: detected capacity change from 0 to 4 [ 2248.818256][T12620] loop4: detected capacity change from 0 to 4 [ 2248.829410][T12605] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:01 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xd, 0x0, 0x100000fe) [ 2248.856559][T12605] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.905203][T12620] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2248.949741][ C0] scsi_io_completion_action: 12 callbacks suppressed [ 2248.949784][ C0] sd 0:0:1:0: tag#3037 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2248.966351][ C0] sd 0:0:1:0: tag#3037 CDB: opcode=0xe5 (vendor) [ 2248.972879][ C0] sd 0:0:1:0: tag#3037 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2248.981917][ C0] sd 0:0:1:0: tag#3037 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2248.990960][ C0] sd 0:0:1:0: tag#3037 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000060000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2249.021776][T12620] loop4: detected capacity change from 0 to 4 [ 2249.043359][T12620] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2249.069790][T12644] loop2: detected capacity change from 0 to 4 [ 2249.095862][T12644] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600025000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2249.161858][T12644] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2249.191788][T12652] loop4: detected capacity change from 0 to 4 [ 2249.240048][T12652] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2249.265001][T12644] loop2: detected capacity change from 0 to 4 [ 2249.282028][T12644] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2249.311589][T12644] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:01 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2249.354082][T12652] loop4: detected capacity change from 0 to 4 [ 2249.374178][T12652] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060002e000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000070000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2249.432840][ C1] sd 0:0:1:0: tag#3045 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2249.442694][ C1] sd 0:0:1:0: tag#3045 CDB: opcode=0xe5 (vendor) [ 2249.449043][ C1] sd 0:0:1:0: tag#3045 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2249.458075][ C1] sd 0:0:1:0: tag#3045 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2249.467106][ C1] sd 0:0:1:0: tag#3045 CDB[20]: 80 19 21:47:01 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xd, 0x0, 0x100000fe) [ 2249.548466][T12685] loop4: detected capacity change from 0 to 4 21:47:01 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xd, 0x0, 0x100000fe) [ 2249.605917][T12685] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2249.608269][T12695] loop2: detected capacity change from 0 to 4 [ 2249.639586][T12695] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2249.693505][ C1] sd 0:0:1:0: tag#3021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2249.703358][ C1] sd 0:0:1:0: tag#3021 CDB: opcode=0xe5 (vendor) [ 2249.709719][ C1] sd 0:0:1:0: tag#3021 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2249.718760][ C1] sd 0:0:1:0: tag#3021 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2249.727793][ C1] sd 0:0:1:0: tag#3021 CDB[20]: 80 19 84 20 e0 6c bb [ 2249.788374][T12695] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2249.806483][T12685] loop4: detected capacity change from 0 to 4 [ 2249.830379][T12685] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2249.863277][T12695] loop2: detected capacity change from 0 to 4 21:47:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060003f000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2249.882243][T12695] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2249.911471][T12695] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:02 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000080000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2250.039666][ C1] sd 0:0:1:0: tag#3032 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.049552][ C1] sd 0:0:1:0: tag#3032 CDB: opcode=0xe5 (vendor) [ 2250.055921][ C1] sd 0:0:1:0: tag#3032 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2250.064985][ C1] sd 0:0:1:0: tag#3032 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2250.074011][ C1] sd 0:0:1:0: tag#3032 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2250.082895][ C0] sd 0:0:1:0: tag#3033 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.092778][ C0] sd 0:0:1:0: tag#3033 CDB: opcode=0xe5 (vendor) [ 2250.099142][ C0] sd 0:0:1:0: tag#3033 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2250.107846][T12723] loop4: detected capacity change from 0 to 4 [ 2250.108190][ C0] sd 0:0:1:0: tag#3033 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2250.118872][T12726] loop2: detected capacity change from 0 to 4 [ 2250.123256][ C0] sd 0:0:1:0: tag#3033 CDB[20]: 80 19 [ 2250.242189][T12726] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2250.251397][T12723] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2250.273516][T12726] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:02 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x10, 0x0, 0x100000fe) [ 2250.339346][T12726] loop2: detected capacity change from 0 to 4 [ 2250.345925][T12723] loop4: detected capacity change from 0 to 4 [ 2250.352278][ C0] sd 0:0:1:0: tag#3064 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.362136][ C0] sd 0:0:1:0: tag#3064 CDB: opcode=0xe5 (vendor) [ 2250.368757][ C0] sd 0:0:1:0: tag#3064 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2250.369594][T12726] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2250.377808][ C0] sd 0:0:1:0: tag#3064 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2250.391371][T12723] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2250.396026][ C0] sd 0:0:1:0: tag#3064 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2250.508356][T12726] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600040000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000090000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2250.661542][T12762] loop4: detected capacity change from 0 to 4 [ 2250.680919][ C0] sd 0:0:1:0: tag#3068 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.690787][ C0] sd 0:0:1:0: tag#3068 CDB: opcode=0xe5 (vendor) [ 2250.697145][ C0] sd 0:0:1:0: tag#3068 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2250.706200][ C0] sd 0:0:1:0: tag#3068 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2250.715259][ C0] sd 0:0:1:0: tag#3068 CDB[20]: 80 19 84 20 e0 6c bb [ 2250.730310][T12762] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2250.734968][T12773] loop2: detected capacity change from 0 to 4 [ 2250.763462][T12773] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2250.802589][T12773] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:03 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x10, 0x0, 0x100000fe) 21:47:03 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x10, 0x0, 0x100000fe) 21:47:03 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2250.854548][T12762] loop4: detected capacity change from 0 to 4 [ 2250.874226][T12773] loop2: detected capacity change from 0 to 4 [ 2250.883632][T12773] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2250.894621][T12762] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2250.921133][ C1] sd 0:0:1:0: tag#3069 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.931073][ C1] sd 0:0:1:0: tag#3069 CDB: opcode=0xe5 (vendor) [ 2250.932703][ C0] sd 0:0:1:0: tag#3070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.937434][ C1] sd 0:0:1:0: tag#3069 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2250.947327][ C0] sd 0:0:1:0: tag#3070 CDB: opcode=0xe5 (vendor) [ 2250.956323][ C1] sd 0:0:1:0: tag#3069 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2250.962630][ C0] sd 0:0:1:0: tag#3070 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2250.971649][ C1] sd 0:0:1:0: tag#3069 CDB[20]: 80 19 84 20 e0 6c bb [ 2250.980654][ C0] sd 0:0:1:0: tag#3070 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2250.996331][ C0] sd 0:0:1:0: tag#3070 CDB[20]: 80 19 [ 2251.202812][T12773] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2251.237284][ C0] sd 0:0:1:0: tag#3034 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 21:47:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600048000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2251.247163][ C0] sd 0:0:1:0: tag#3034 CDB: opcode=0xe5 (vendor) [ 2251.253518][ C0] sd 0:0:1:0: tag#3034 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2251.262586][ C0] sd 0:0:1:0: tag#3034 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2251.271659][ C0] sd 0:0:1:0: tag#3034 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060004c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000a0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2251.315091][T12809] loop4: detected capacity change from 0 to 4 [ 2251.327331][T12809] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:03 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x24f, 0x0, 0x100000fe) [ 2251.381873][T12818] loop4: detected capacity change from 0 to 4 [ 2251.398138][T12818] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:03 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2251.468454][T12818] loop4: detected capacity change from 0 to 4 [ 2251.477242][T12830] loop2: detected capacity change from 0 to 4 [ 2251.497866][T12818] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2251.508247][T12830] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600060000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2251.555132][T12830] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2251.600796][T12847] loop4: detected capacity change from 0 to 4 [ 2251.622774][T12847] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2251.636498][T12830] loop2: detected capacity change from 0 to 4 [ 2251.661952][T12830] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2251.724415][T12847] loop4: detected capacity change from 0 to 4 [ 2251.731052][T12830] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:04 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x7d, 0x0, 0x100000fe) 21:47:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000b0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2251.769107][T12847] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600068000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2251.911807][T12884] loop2: detected capacity change from 0 to 4 [ 2251.918860][T12883] loop4: detected capacity change from 0 to 4 [ 2251.947599][T12884] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:04 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x6b, 0x0, 0x100000fe) [ 2251.959020][T12883] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2251.991292][T12884] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.049866][T12883] loop4: detected capacity change from 0 to 4 [ 2252.057433][T12884] loop2: detected capacity change from 0 to 4 [ 2252.076955][T12884] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2252.087202][T12883] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060006c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2252.130426][T12884] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000c0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:04 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2252.196431][T12912] loop4: detected capacity change from 0 to 4 [ 2252.222850][T12912] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.307881][T12912] loop4: detected capacity change from 0 to 4 [ 2252.330158][T12912] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.376724][T12926] loop2: detected capacity change from 0 to 4 [ 2252.397335][T12926] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600074000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2252.422622][T12926] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.481956][T12935] loop4: detected capacity change from 0 to 4 [ 2252.507391][T12935] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.509283][T12926] loop2: detected capacity change from 0 to 4 21:47:04 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2252.550696][T12926] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2252.576161][T12935] loop4: detected capacity change from 0 to 4 21:47:04 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2, 0x100000fe) [ 2252.593778][T12935] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.608175][T12926] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000d0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2252.763521][T12964] loop4: detected capacity change from 0 to 4 [ 2252.789238][T12972] loop2: detected capacity change from 0 to 4 [ 2252.810513][T12964] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.867478][T12972] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2252.906748][T12972] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2252.927317][T12964] loop4: detected capacity change from 0 to 4 [ 2252.948956][T12964] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:05 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xc8, 0x0, 0x100000fe) 21:47:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060fffe000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2253.019377][T12972] loop2: detected capacity change from 0 to 4 [ 2253.057567][T12972] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000e0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2253.095380][T12972] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2253.108272][T13007] loop4: detected capacity change from 0 to 4 [ 2253.122082][T13007] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:05 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2, 0x100000fe) [ 2253.156992][T13016] loop2: detected capacity change from 0 to 4 [ 2253.172870][T13007] loop4: detected capacity change from 0 to 4 [ 2253.185207][T13007] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2253.196481][T13016] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:05 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2253.207621][T13016] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600fff000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000f0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2253.303382][T13039] loop4: detected capacity change from 0 to 4 [ 2253.317918][T13043] loop2: detected capacity change from 0 to 4 [ 2253.333295][T13039] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2253.355715][T13043] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2253.392000][T13043] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2253.434316][T13039] loop4: detected capacity change from 0 to 4 [ 2253.445631][T13039] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060feff000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2253.509255][T13043] loop2: detected capacity change from 0 to 4 [ 2253.534052][T13043] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2253.543692][T13070] loop4: detected capacity change from 0 to 4 [ 2253.577695][T13043] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2253.614119][T13070] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000100000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:06 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3, 0x100000fe) [ 2253.702244][T13070] loop4: detected capacity change from 0 to 4 [ 2253.725159][T13070] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000010000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2253.775910][T13091] loop2: detected capacity change from 0 to 4 [ 2253.833471][T13091] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2253.863559][T13102] loop4: detected capacity change from 0 to 4 [ 2253.874632][T13091] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2253.885598][T13102] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:06 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2253.965600][T13091] loop2: detected capacity change from 0 to 4 [ 2253.966397][T13102] loop4: detected capacity change from 0 to 4 [ 2253.984880][T13091] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2254.027614][T13102] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2254.047712][ C1] scsi_io_completion_action: 13 callbacks suppressed [ 2254.047739][ C1] sd 0:0:1:0: tag#3014 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2254.049379][T13091] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2254.054563][ C1] sd 0:0:1:0: tag#3014 CDB: opcode=0xe5 (vendor) [ 2254.079975][ C1] sd 0:0:1:0: tag#3014 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2254.089038][ C1] sd 0:0:1:0: tag#3014 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2254.098105][ C1] sd 0:0:1:0: tag#3014 CDB[20]: 80 19 21:47:06 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2, 0x100000fe) 21:47:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000011000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000110000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:06 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3, 0x100000fe) [ 2254.399115][T13145] loop2: detected capacity change from 0 to 4 [ 2254.403388][T13146] loop4: detected capacity change from 0 to 4 [ 2254.410757][ C0] sd 0:0:1:0: tag#3059 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2254.421325][ C0] sd 0:0:1:0: tag#3059 CDB: opcode=0xe5 (vendor) [ 2254.427686][ C0] sd 0:0:1:0: tag#3059 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2254.436756][ C0] sd 0:0:1:0: tag#3059 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2254.445805][ C0] sd 0:0:1:0: tag#3059 CDB[20]: 80 19 84 20 e0 6c bb [ 2254.539829][T13146] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2254.539929][T13145] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:06 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2254.586862][T13146] loop4: detected capacity change from 0 to 4 [ 2254.615435][T13146] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2254.628032][ C1] sd 0:0:1:0: tag#3008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2254.637941][ C1] sd 0:0:1:0: tag#3008 CDB: opcode=0xe5 (vendor) [ 2254.644297][ C1] sd 0:0:1:0: tag#3008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2254.653337][ C1] sd 0:0:1:0: tag#3008 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2254.662417][ C1] sd 0:0:1:0: tag#3008 CDB[20]: 80 19 [ 2254.714327][T13145] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2254.745589][ C1] sd 0:0:1:0: tag#3009 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2254.755488][ C1] sd 0:0:1:0: tag#3009 CDB: opcode=0xe5 (vendor) 21:47:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000012000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2254.761845][ C1] sd 0:0:1:0: tag#3009 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2254.770942][ C1] sd 0:0:1:0: tag#3009 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2254.780008][ C1] sd 0:0:1:0: tag#3009 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2254.848677][T13175] loop4: detected capacity change from 0 to 4 [ 2254.889222][T13175] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2254.916863][T13145] loop2: detected capacity change from 0 to 4 [ 2254.929840][T13145] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2254.962372][T13145] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2254.994027][T13175] loop4: detected capacity change from 0 to 4 21:47:07 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4, 0x100000fe) [ 2255.017926][T13175] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000120000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2255.060828][ C1] sd 0:0:1:0: tag#3036 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2255.070697][ C1] sd 0:0:1:0: tag#3036 CDB: opcode=0xe5 (vendor) [ 2255.077058][ C1] sd 0:0:1:0: tag#3036 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2255.086099][ C1] sd 0:0:1:0: tag#3036 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2255.095160][ C1] sd 0:0:1:0: tag#3036 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000020000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2255.246338][T13202] loop4: detected capacity change from 0 to 4 [ 2255.261967][T13209] loop2: detected capacity change from 0 to 4 [ 2255.288803][T13202] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2255.295756][ C0] sd 0:0:1:0: tag#3043 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2255.307939][ C0] sd 0:0:1:0: tag#3043 CDB: opcode=0xe5 (vendor) [ 2255.314295][ C0] sd 0:0:1:0: tag#3043 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2255.323329][ C0] sd 0:0:1:0: tag#3043 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2255.332392][ C0] sd 0:0:1:0: tag#3043 CDB[20]: 80 19 84 20 e0 6c bb [ 2255.369961][T13209] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2255.419887][T13209] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:07 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4, 0x100000fe) [ 2255.505434][T13209] loop2: detected capacity change from 0 to 4 [ 2255.508043][T13202] loop4: detected capacity change from 0 to 4 [ 2255.514738][T13209] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2255.532262][T13202] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:07 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:07 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3, 0x100000fe) [ 2255.554620][T13209] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2255.613964][ C0] sd 0:0:1:0: tag#3041 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2255.623883][ C0] sd 0:0:1:0: tag#3041 CDB: opcode=0xe5 (vendor) [ 2255.630278][ C0] sd 0:0:1:0: tag#3041 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2255.639333][ C0] sd 0:0:1:0: tag#3041 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2255.648381][ C0] sd 0:0:1:0: tag#3041 CDB[20]: 80 19 21:47:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000220000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000007cd000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2255.655550][ C1] sd 0:0:1:0: tag#3042 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2255.665406][ C1] sd 0:0:1:0: tag#3042 CDB: opcode=0xe5 (vendor) [ 2255.671756][ C1] sd 0:0:1:0: tag#3042 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2255.680813][ C1] sd 0:0:1:0: tag#3042 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2255.689854][ C1] sd 0:0:1:0: tag#3042 CDB[20]: 80 19 84 20 e0 6c bb [ 2255.717644][T13248] loop4: detected capacity change from 0 to 4 [ 2255.735151][T13251] loop2: detected capacity change from 0 to 4 [ 2255.826550][T13251] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2255.835584][T13248] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2255.849341][T13251] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2255.924979][T13248] loop4: detected capacity change from 0 to 4 [ 2255.940500][T13251] loop2: detected capacity change from 0 to 4 [ 2255.948252][T13248] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2255.957618][ C0] sd 0:0:1:0: tag#3051 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2255.967469][ C0] sd 0:0:1:0: tag#3051 CDB: opcode=0xe5 (vendor) [ 2255.973804][ C0] sd 0:0:1:0: tag#3051 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2255.982863][ C0] sd 0:0:1:0: tag#3051 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2255.991931][ C0] sd 0:0:1:0: tag#3051 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2256.005189][T13251] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2256.064955][T13251] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000250000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2256.175230][T13278] loop4: detected capacity change from 0 to 4 21:47:08 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x5, 0x100000fe) [ 2256.215625][T13278] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2256.252042][T13288] loop2: detected capacity change from 0 to 4 [ 2256.294674][ C1] sd 0:0:1:0: tag#3018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2256.304555][ C1] sd 0:0:1:0: tag#3018 CDB: opcode=0xe5 (vendor) [ 2256.312539][ C1] sd 0:0:1:0: tag#3018 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2256.321606][ C1] sd 0:0:1:0: tag#3018 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2256.330773][ C1] sd 0:0:1:0: tag#3018 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2256.342580][T13288] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2256.379625][T13288] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2256.477496][T13278] loop4: detected capacity change from 0 to 4 [ 2256.488442][T13288] loop2: detected capacity change from 0 to 4 [ 2256.499073][T13278] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2256.510016][T13288] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:08 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2256.573365][T13288] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000002e0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600003000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:09 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x5, 0x100000fe) 21:47:09 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4, 0x100000fe) [ 2256.693755][T13333] loop4: detected capacity change from 0 to 4 [ 2256.716183][T13336] loop2: detected capacity change from 0 to 4 [ 2256.733350][T13333] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600004000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2256.754305][T13336] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2256.790548][T13336] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2256.859007][T13351] loop4: detected capacity change from 0 to 4 [ 2256.878585][T13336] loop2: detected capacity change from 0 to 4 [ 2256.895963][T13336] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2256.921236][T13351] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2256.930541][T13336] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000480000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2257.011275][T13351] loop4: detected capacity change from 0 to 4 [ 2257.039967][T13351] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600005000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2257.090785][T13373] loop2: detected capacity change from 0 to 4 [ 2257.121301][T13373] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2257.167033][T13373] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2257.195949][T13387] loop4: detected capacity change from 0 to 4 [ 2257.218206][T13387] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2257.245711][T13373] loop2: detected capacity change from 0 to 4 [ 2257.266123][T13373] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2257.293460][T13373] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2257.304187][T13387] loop4: detected capacity change from 0 to 4 [ 2257.320445][T13387] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:09 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6, 0x100000fe) 21:47:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000004c0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600006000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2257.458470][T13417] loop4: detected capacity change from 0 to 4 [ 2257.464337][T13418] loop2: detected capacity change from 0 to 4 [ 2257.496954][T13417] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:09 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2257.512464][T13418] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2257.547934][T13418] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2257.559539][T13417] loop4: detected capacity change from 0 to 4 [ 2257.572854][T13417] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2257.645773][T13418] loop2: detected capacity change from 0 to 4 [ 2257.663112][T13418] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600007000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2257.705480][T13418] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:10 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6, 0x100000fe) [ 2257.769332][T13456] loop4: detected capacity change from 0 to 4 21:47:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000600000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2257.811685][T13456] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2257.877055][T13456] loop4: detected capacity change from 0 to 4 [ 2257.902842][T13470] loop2: detected capacity change from 0 to 4 [ 2257.916699][T13456] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:10 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x5, 0x100000fe) [ 2257.932055][T13470] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600008000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2257.973922][T13470] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2258.059474][T13470] loop2: detected capacity change from 0 to 4 [ 2258.065188][T13487] loop4: detected capacity change from 0 to 4 [ 2258.085981][T13470] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2258.109088][T13487] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2258.137775][T13470] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000680000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2258.195220][T13487] loop4: detected capacity change from 0 to 4 [ 2258.215232][T13487] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600009000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2258.346528][T13516] loop2: detected capacity change from 0 to 4 [ 2258.401899][T13521] loop4: detected capacity change from 0 to 4 [ 2258.415206][T13516] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2258.431769][T13521] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2258.448115][T13516] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:10 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7, 0x100000fe) 21:47:10 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2258.508870][T13516] loop2: detected capacity change from 0 to 4 [ 2258.525682][T13521] loop4: detected capacity change from 0 to 4 [ 2258.535856][T13516] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2258.546741][T13521] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2258.574422][T13516] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000006c0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2258.718922][T13551] loop2: detected capacity change from 0 to 4 [ 2258.723268][T13552] loop4: detected capacity change from 0 to 4 [ 2258.748010][T13552] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2258.764594][T13551] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2258.806518][T13551] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2258.859070][T13552] loop4: detected capacity change from 0 to 4 [ 2258.879114][T13551] loop2: detected capacity change from 0 to 4 [ 2258.897484][T13552] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:11 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7, 0x100000fe) [ 2258.909462][T13551] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2258.948311][T13551] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000b000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000740000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2259.020629][T13584] loop4: detected capacity change from 0 to 4 [ 2259.039895][T13584] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:11 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6, 0x100000fe) [ 2259.109654][T13584] loop4: detected capacity change from 0 to 4 [ 2259.132381][T13584] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2259.173579][T13599] loop2: detected capacity change from 0 to 4 [ 2259.188311][ C1] scsi_io_completion_action: 11 callbacks suppressed [ 2259.188339][ C1] sd 0:0:1:0: tag#3052 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2259.204870][ C1] sd 0:0:1:0: tag#3052 CDB: opcode=0xe5 (vendor) [ 2259.211201][ C1] sd 0:0:1:0: tag#3052 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:47:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2259.220343][ C1] sd 0:0:1:0: tag#3052 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2259.229405][ C1] sd 0:0:1:0: tag#3052 CDB[20]: 80 19 84 20 e0 6c bb [ 2259.287885][T13609] loop4: detected capacity change from 0 to 4 [ 2259.349598][T13599] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2259.349740][T13609] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2259.407018][T13599] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2259.447709][ C0] sd 0:0:1:0: tag#3008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2259.457601][ C0] sd 0:0:1:0: tag#3008 CDB: opcode=0xe5 (vendor) [ 2259.463934][ C0] sd 0:0:1:0: tag#3008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2259.472986][ C0] sd 0:0:1:0: tag#3008 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2259.482045][ C0] sd 0:0:1:0: tag#3008 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:11 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2259.575018][T13599] loop2: detected capacity change from 0 to 4 [ 2259.583040][T13609] loop4: detected capacity change from 0 to 4 [ 2259.601099][T13599] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2259.604262][T13609] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:11 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x8, 0x100000fe) [ 2259.622405][ C0] sd 0:0:1:0: tag#3036 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2259.632281][ C0] sd 0:0:1:0: tag#3036 CDB: opcode=0xe5 (vendor) [ 2259.638674][ C0] sd 0:0:1:0: tag#3036 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2259.646634][T13599] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2259.647719][ C0] sd 0:0:1:0: tag#3036 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2259.666101][ C0] sd 0:0:1:0: tag#3036 CDB[20]: 80 19 [ 2259.779990][ C0] sd 0:0:1:0: tag#3037 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2259.789882][ C0] sd 0:0:1:0: tag#3037 CDB: opcode=0xe5 (vendor) [ 2259.796259][ C0] sd 0:0:1:0: tag#3037 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2259.805310][ C0] sd 0:0:1:0: tag#3037 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2259.814367][ C0] sd 0:0:1:0: tag#3037 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000d000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000007a0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2259.916469][ C1] sd 0:0:1:0: tag#3048 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2259.926471][ C1] sd 0:0:1:0: tag#3048 CDB: opcode=0xe5 (vendor) [ 2259.932918][ C1] sd 0:0:1:0: tag#3048 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2259.942075][ C1] sd 0:0:1:0: tag#3048 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2259.951467][ C1] sd 0:0:1:0: tag#3048 CDB[20]: 80 19 84 20 e0 6c bb [ 2260.085667][T13649] loop4: detected capacity change from 0 to 4 [ 2260.104370][T13649] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:12 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7, 0x100000fe) 21:47:12 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x8, 0x100000fe) [ 2260.133180][T13656] loop2: detected capacity change from 0 to 4 [ 2260.176560][T13656] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2260.203632][T13649] loop4: detected capacity change from 0 to 4 [ 2260.210306][ C0] sd 0:0:1:0: tag#3040 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2260.220188][ C0] sd 0:0:1:0: tag#3040 CDB: opcode=0xe5 (vendor) [ 2260.226573][ C0] sd 0:0:1:0: tag#3040 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2260.235627][ C0] sd 0:0:1:0: tag#3040 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2260.237385][T13656] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2260.244671][ C0] sd 0:0:1:0: tag#3040 CDB[20]: 80 19 84 20 e0 6c bb [ 2260.273625][T13649] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000e000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2260.405159][T13656] loop2: detected capacity change from 0 to 4 [ 2260.422403][T13656] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2260.466334][T13679] loop4: detected capacity change from 0 to 4 [ 2260.490384][T13679] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2260.493711][T13656] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fe0000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2260.565363][T13679] loop4: detected capacity change from 0 to 4 [ 2260.573161][T13679] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:12 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2260.606297][ C1] sd 0:0:1:0: tag#3024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2260.616181][ C1] sd 0:0:1:0: tag#3024 CDB: opcode=0xe5 (vendor) [ 2260.622599][ C1] sd 0:0:1:0: tag#3024 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2260.631661][ C1] sd 0:0:1:0: tag#3024 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2260.640701][ C1] sd 0:0:1:0: tag#3024 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000f000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2260.704212][ C0] sd 0:0:1:0: tag#3041 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2260.714550][ C0] sd 0:0:1:0: tag#3041 CDB: opcode=0xe5 (vendor) [ 2260.720919][ C0] sd 0:0:1:0: tag#3041 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2260.730002][ C0] sd 0:0:1:0: tag#3041 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2260.739051][ C0] sd 0:0:1:0: tag#3041 CDB[20]: 80 19 [ 2260.769453][T13706] loop2: detected capacity change from 0 to 4 [ 2260.780890][T13707] loop4: detected capacity change from 0 to 4 [ 2260.816528][T13706] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2260.829645][T13707] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:13 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x9, 0x100000fe) [ 2260.861514][T13706] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2260.927504][T13707] loop4: detected capacity change from 0 to 4 [ 2260.937698][T13706] loop2: detected capacity change from 0 to 4 [ 2260.948599][T13707] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2260.958403][ C1] sd 0:0:1:0: tag#3045 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2260.968249][ C1] sd 0:0:1:0: tag#3045 CDB: opcode=0xe5 (vendor) [ 2260.974608][ C1] sd 0:0:1:0: tag#3045 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2260.983633][ C1] sd 0:0:1:0: tag#3045 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2260.992701][ C1] sd 0:0:1:0: tag#3045 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2261.100566][T13706] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600010000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2261.168099][T13706] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000150100000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:13 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x9, 0x100000fe) [ 2261.223748][T13743] loop4: detected capacity change from 0 to 4 [ 2261.261014][T13743] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:13 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x8, 0x100000fe) [ 2261.312178][T13751] loop2: detected capacity change from 0 to 4 [ 2261.332939][T13751] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2261.342241][T13751] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 2261.351561][T13743] loop4: detected capacity change from 0 to 4 [ 2261.393237][T13743] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2261.402878][ C1] sd 0:0:1:0: tag#3041 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2261.412727][ C1] sd 0:0:1:0: tag#3041 CDB: opcode=0xe5 (vendor) [ 2261.419099][ C1] sd 0:0:1:0: tag#3041 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2261.428154][ C1] sd 0:0:1:0: tag#3041 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2261.437207][ C1] sd 0:0:1:0: tag#3041 CDB[20]: 80 19 84 20 e0 6c bb [ 2261.537002][T13751] loop2: detected capacity change from 0 to 4 [ 2261.555616][T13751] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2261.564826][T13751] EXT4-fs (loop2): ea_inode feature is not supported for Hurd 21:47:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600011000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000aa0100000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:13 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2261.677189][T13778] loop2: detected capacity change from 0 to 4 [ 2261.686652][T13779] loop4: detected capacity change from 0 to 4 [ 2261.715073][T13779] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2261.726715][T13778] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2261.736689][T13778] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 2261.797449][T13779] loop4: detected capacity change from 0 to 4 [ 2261.817764][T13778] loop2: detected capacity change from 0 to 4 [ 2261.835473][T13779] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2261.866251][T13778] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2261.875555][T13778] EXT4-fs (loop2): ea_inode feature is not supported for Hurd 21:47:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600012000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000ab0100000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:14 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa, 0x100000fe) [ 2262.057649][T13816] loop4: detected capacity change from 0 to 4 [ 2262.075505][T13817] loop2: detected capacity change from 0 to 4 [ 2262.100745][T13816] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2262.116599][T13817] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2262.125906][T13817] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 2262.216117][T13816] loop4: detected capacity change from 0 to 4 [ 2262.223181][T13817] loop2: detected capacity change from 0 to 4 [ 2262.248302][T13816] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2262.257963][T13817] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2262.267116][T13817] EXT4-fs (loop2): ea_inode feature is not supported for Hurd 21:47:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600022000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fa0100000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:14 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa, 0x100000fe) [ 2262.396408][T13849] loop4: detected capacity change from 0 to 4 [ 2262.423961][T13849] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2262.477316][T13849] loop4: detected capacity change from 0 to 4 [ 2262.493253][T13861] loop2: detected capacity change from 0 to 4 [ 2262.511971][T13849] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:14 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x9, 0x100000fe) [ 2262.544821][T13861] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2262.554009][T13861] EXT4-fs (loop2): ea_inode feature is not supported for Hurd 21:47:15 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600025000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2262.645782][T13861] loop2: detected capacity change from 0 to 4 [ 2262.653547][T13861] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2262.662711][T13861] EXT4-fs (loop2): ea_inode feature is not supported for Hurd 21:47:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000040200000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2262.741517][T13887] loop4: detected capacity change from 0 to 4 [ 2262.796054][T13887] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2262.810859][T13895] loop2: detected capacity change from 0 to 4 [ 2262.845680][T13895] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2262.881477][T13887] loop4: detected capacity change from 0 to 4 [ 2262.889161][T13895] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2262.914841][T13887] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060002e000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2263.001525][T13895] loop2: detected capacity change from 0 to 4 [ 2263.020683][T13895] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:15 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb, 0x100000fe) 21:47:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000300000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2263.068304][T13895] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2263.092344][T13916] loop4: detected capacity change from 0 to 4 [ 2263.146205][T13916] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2263.212647][T13929] loop2: detected capacity change from 0 to 4 [ 2263.225337][T13916] loop4: detected capacity change from 0 to 4 [ 2263.246690][T13916] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2263.262227][T13929] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2263.285232][T13929] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2263.344904][T13929] loop2: detected capacity change from 0 to 4 21:47:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600048000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2263.389969][T13929] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2263.440968][T13953] loop4: detected capacity change from 0 to 4 [ 2263.454340][T13929] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2263.476741][T13953] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000020400000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:15 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb, 0x100000fe) [ 2263.554482][T13953] loop4: detected capacity change from 0 to 4 [ 2263.578757][T13953] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2263.631075][T13972] loop2: detected capacity change from 0 to 4 [ 2263.657148][T13972] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:16 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060004c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2263.692511][T13972] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2263.727995][T13972] loop2: detected capacity change from 0 to 4 [ 2263.742499][T13988] loop4: detected capacity change from 0 to 4 [ 2263.759566][T13972] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2263.777309][T13988] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:16 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa, 0x100000fe) [ 2263.806872][T13972] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000060400000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2263.868335][T13988] loop4: detected capacity change from 0 to 4 [ 2263.891635][T13988] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600060000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2264.010651][T14017] loop2: detected capacity change from 0 to 4 [ 2264.061087][T14024] loop4: detected capacity change from 0 to 4 [ 2264.085252][T14017] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2264.100694][T14024] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:16 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc, 0x100000fe) [ 2264.123693][T14017] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2264.197988][T14024] loop4: detected capacity change from 0 to 4 [ 2264.198622][T14017] loop2: detected capacity change from 0 to 4 [ 2264.222813][T14017] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2264.223010][T14024] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2264.245470][ C0] scsi_io_completion_action: 11 callbacks suppressed [ 2264.245503][ C0] sd 0:0:1:0: tag#3015 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2264.262077][ C0] sd 0:0:1:0: tag#3015 CDB: opcode=0xe5 (vendor) [ 2264.268444][ C0] sd 0:0:1:0: tag#3015 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2264.274659][T14017] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2264.277495][ C0] sd 0:0:1:0: tag#3015 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2264.295812][ C0] sd 0:0:1:0: tag#3015 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600068000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000100400000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:17 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc, 0x100000fe) 21:47:17 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2264.676530][T14057] loop2: detected capacity change from 0 to 4 [ 2264.699803][T14057] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2264.710461][T14061] loop4: detected capacity change from 0 to 4 [ 2264.731315][T14061] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2264.758711][ C1] sd 0:0:1:0: tag#3012 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2264.761668][T14057] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2264.768586][ C1] sd 0:0:1:0: tag#3012 CDB: opcode=0xe5 (vendor) [ 2264.768605][ C1] sd 0:0:1:0: tag#3012 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2264.793260][ C1] sd 0:0:1:0: tag#3012 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2264.802313][ C1] sd 0:0:1:0: tag#3012 CDB[20]: 80 19 [ 2264.837172][T14061] loop4: detected capacity change from 0 to 4 [ 2264.859748][T14061] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2264.861864][T14057] loop2: detected capacity change from 0 to 4 21:47:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060006c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2264.944405][T14057] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:17 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb, 0x100000fe) [ 2265.003127][T14057] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2265.025417][T14091] loop4: detected capacity change from 0 to 4 [ 2265.068493][T14091] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2265.088943][ C0] sd 0:0:1:0: tag#3064 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2265.098811][ C0] sd 0:0:1:0: tag#3064 CDB: opcode=0xe5 (vendor) [ 2265.105178][ C0] sd 0:0:1:0: tag#3064 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:47:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000500000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2265.114254][ C0] sd 0:0:1:0: tag#3064 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2265.123289][ C0] sd 0:0:1:0: tag#3064 CDB[20]: 80 19 84 20 e0 6c bb [ 2265.153461][ C1] sd 0:0:1:0: tag#3065 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2265.163334][ C1] sd 0:0:1:0: tag#3065 CDB: opcode=0xe5 (vendor) [ 2265.169693][ C1] sd 0:0:1:0: tag#3065 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2265.178738][ C1] sd 0:0:1:0: tag#3065 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2265.187781][ C1] sd 0:0:1:0: tag#3065 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2265.312107][T14091] loop4: detected capacity change from 0 to 4 [ 2265.326830][T14110] loop2: detected capacity change from 0 to 4 [ 2265.334120][T14091] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:17 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x10, 0x100000fe) 21:47:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600074000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2265.366394][T14110] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2265.389486][T14110] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:17 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2265.446206][ C0] sd 0:0:1:0: tag#3020 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2265.456082][ C0] sd 0:0:1:0: tag#3020 CDB: opcode=0xe5 (vendor) [ 2265.462772][ C0] sd 0:0:1:0: tag#3020 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2265.471837][ C0] sd 0:0:1:0: tag#3020 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2265.481111][ C0] sd 0:0:1:0: tag#3020 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2265.502547][ C1] sd 0:0:1:0: tag#3021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2265.504351][T14124] loop4: detected capacity change from 0 to 4 [ 2265.512427][ C1] sd 0:0:1:0: tag#3021 CDB: opcode=0xe5 (vendor) [ 2265.524812][ C1] sd 0:0:1:0: tag#3021 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2265.533863][ C1] sd 0:0:1:0: tag#3021 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2265.542955][ C1] sd 0:0:1:0: tag#3021 CDB[20]: 80 19 [ 2265.590162][T14124] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2265.670775][T14110] loop2: detected capacity change from 0 to 4 [ 2265.684866][T14110] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2265.708928][T14124] loop4: detected capacity change from 0 to 4 [ 2265.717189][T14110] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2265.747471][T14124] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000600000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:18 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xd, 0x100000fe) 21:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2265.856855][T14155] loop2: detected capacity change from 0 to 4 [ 2265.889345][T14155] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2265.911403][T14155] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2265.977864][T14166] loop4: detected capacity change from 0 to 4 [ 2266.004633][T14155] loop2: detected capacity change from 0 to 4 [ 2266.018595][T14155] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2266.031246][T14166] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2266.049108][T14155] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000040600000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2266.139937][T14166] loop4: detected capacity change from 0 to 4 [ 2266.175303][T14166] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:18 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc, 0x100000fe) [ 2266.183168][T14186] loop2: detected capacity change from 0 to 4 [ 2266.207696][T14186] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2266.259405][T14186] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2266.275975][ C1] sd 0:0:1:0: tag#3024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2266.285865][ C1] sd 0:0:1:0: tag#3024 CDB: opcode=0xe5 (vendor) [ 2266.292206][ C1] sd 0:0:1:0: tag#3024 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000fe000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2266.301284][ C1] sd 0:0:1:0: tag#3024 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2266.310327][ C1] sd 0:0:1:0: tag#3024 CDB[20]: 80 19 84 20 e0 6c bb [ 2266.340270][ C0] sd 0:0:1:0: tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2266.350143][ C0] sd 0:0:1:0: tag#3025 CDB: opcode=0xe5 (vendor) [ 2266.356527][ C0] sd 0:0:1:0: tag#3025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2266.365665][ C0] sd 0:0:1:0: tag#3025 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2266.374762][ C0] sd 0:0:1:0: tag#3025 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2266.409618][T14203] loop4: detected capacity change from 0 to 4 [ 2266.457899][T14203] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:18 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:18 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x12, 0x100000fe) [ 2266.538368][T14203] loop4: detected capacity change from 0 to 4 [ 2266.546117][T14186] loop2: detected capacity change from 0 to 4 [ 2266.560509][T14203] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2266.575694][T14186] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2266.624467][ C0] sd 0:0:1:0: tag#3021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2266.631291][ C1] sd 0:0:1:0: tag#3022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2266.634337][ C0] sd 0:0:1:0: tag#3021 CDB: opcode=0xe5 (vendor) [ 2266.644148][ C1] sd 0:0:1:0: tag#3022 CDB: opcode=0xe5 (vendor) [ 2266.644167][ C1] sd 0:0:1:0: tag#3022 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2266.650470][ C0] sd 0:0:1:0: tag#3021 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2266.656801][ C1] sd 0:0:1:0: tag#3022 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2266.665807][ C0] sd 0:0:1:0: tag#3021 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2266.674809][ C1] sd 0:0:1:0: tag#3022 CDB[20]: 80 19 [ 2266.683846][ C0] sd 0:0:1:0: tag#3021 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600004020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2266.889135][T14235] loop4: detected capacity change from 0 to 4 21:47:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000700000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2267.019363][T14186] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2267.019459][T14235] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:19 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xe, 0x100000fe) [ 2267.105161][T14235] loop4: detected capacity change from 0 to 4 [ 2267.142856][T14249] loop2: detected capacity change from 0 to 4 21:47:19 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xd, 0x100000fe) [ 2267.154959][T14235] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2267.174322][T14249] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000030f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2267.222522][T14249] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:19 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2267.317686][T14249] loop2: detected capacity change from 0 to 4 [ 2267.338838][T14249] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2267.382202][T14272] loop4: detected capacity change from 0 to 4 [ 2267.410329][T14272] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2267.413977][T14249] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2267.477422][T14272] loop4: detected capacity change from 0 to 4 [ 2267.493737][T14272] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000900000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2267.607340][T14293] loop4: detected capacity change from 0 to 4 [ 2267.641881][T14293] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:19 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x22, 0x100000fe) [ 2267.668377][T14301] loop2: detected capacity change from 0 to 4 [ 2267.716403][T14301] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2267.755621][T14301] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2267.757204][T14293] loop4: detected capacity change from 0 to 4 [ 2267.798727][T14293] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600006040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2267.858374][T14301] loop2: detected capacity change from 0 to 4 [ 2267.876206][T14301] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2267.929923][T14325] loop4: detected capacity change from 0 to 4 [ 2267.942058][T14301] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000a00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2267.985498][T14325] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2268.068316][T14325] loop4: detected capacity change from 0 to 4 [ 2268.094986][T14325] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2268.144357][T14349] loop2: detected capacity change from 0 to 4 21:47:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600010040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2268.200642][T14349] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2268.237695][T14357] loop4: detected capacity change from 0 to 4 21:47:20 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x10, 0x100000fe) [ 2268.244690][T14349] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:20 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2268.281761][T14357] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:20 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xe, 0x100000fe) [ 2268.322340][T14349] loop2: detected capacity change from 0 to 4 [ 2268.340630][T14349] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2268.353530][T14357] loop4: detected capacity change from 0 to 4 [ 2268.371864][T14357] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2268.399616][T14349] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000050f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000b00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2268.539222][T14389] loop4: detected capacity change from 0 to 4 [ 2268.570124][T14398] loop2: detected capacity change from 0 to 4 [ 2268.585259][T14389] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2268.611980][T14398] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2268.640378][T14398] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:21 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc0, 0x100000fe) [ 2268.693200][T14389] loop4: detected capacity change from 0 to 4 [ 2268.707780][T14398] loop2: detected capacity change from 0 to 4 [ 2268.716336][T14389] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2268.727012][T14398] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000060f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2268.770351][T14398] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000c00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2268.852398][T14425] loop4: detected capacity change from 0 to 4 [ 2268.897236][T14425] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2268.966444][T14435] loop2: detected capacity change from 0 to 4 [ 2268.998507][T14425] loop4: detected capacity change from 0 to 4 [ 2269.010282][T14435] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2269.020086][T14425] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600004060f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2269.064598][T14435] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2269.132454][T14448] loop4: detected capacity change from 0 to 4 [ 2269.158520][T14435] loop2: detected capacity change from 0 to 4 [ 2269.175354][T14448] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2269.199060][T14435] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2269.248630][T14435] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2269.268901][T14448] loop4: detected capacity change from 0 to 4 [ 2269.290720][ C0] scsi_io_completion_action: 10 callbacks suppressed [ 2269.290746][ C0] sd 0:0:1:0: tag#3035 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2269.307303][ C0] sd 0:0:1:0: tag#3035 CDB: opcode=0xe5 (vendor) [ 2269.313653][ C0] sd 0:0:1:0: tag#3035 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2269.322696][ C0] sd 0:0:1:0: tag#3035 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2269.331760][ C0] sd 0:0:1:0: tag#3035 CDB[20]: 80 19 84 20 e0 6c bb [ 2269.339439][T14448] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000070f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000d00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:21 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x12, 0x100000fe) 21:47:21 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2269.461671][T14478] loop4: detected capacity change from 0 to 4 [ 2269.477645][T14483] loop2: detected capacity change from 0 to 4 [ 2269.491134][ C0] sd 0:0:1:0: tag#3014 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2269.501099][ C0] sd 0:0:1:0: tag#3014 CDB: opcode=0xe5 (vendor) [ 2269.507454][ C0] sd 0:0:1:0: tag#3014 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2269.516595][ C0] sd 0:0:1:0: tag#3014 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2269.525648][ C0] sd 0:0:1:0: tag#3014 CDB[20]: 80 19 [ 2269.575111][T14483] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2269.596568][T14478] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2269.613223][T14483] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:22 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x10, 0x100000fe) [ 2269.691168][ C1] sd 0:0:1:0: tag#3023 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2269.701071][ C1] sd 0:0:1:0: tag#3023 CDB: opcode=0xe5 (vendor) [ 2269.707446][ C1] sd 0:0:1:0: tag#3023 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2269.716520][ C1] sd 0:0:1:0: tag#3023 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2269.725935][ C1] sd 0:0:1:0: tag#3023 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2269.741570][T14478] loop4: detected capacity change from 0 to 4 [ 2269.758704][ C0] sd 0:0:1:0: tag#3024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2269.768587][ C0] sd 0:0:1:0: tag#3024 CDB: opcode=0xe5 (vendor) [ 2269.774953][ C0] sd 0:0:1:0: tag#3024 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2269.784039][ C0] sd 0:0:1:0: tag#3024 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2269.793070][ C0] sd 0:0:1:0: tag#3024 CDB[20]: 80 19 84 20 e0 6c bb [ 2269.878323][T14483] loop2: detected capacity change from 0 to 4 [ 2269.903460][T14483] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2269.912729][T14478] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000090f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2269.951840][T14483] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:22 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x204, 0x100000fe) 21:47:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000e00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2270.080154][T14524] loop4: detected capacity change from 0 to 4 [ 2270.094274][ C1] sd 0:0:1:0: tag#3022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2270.104140][ C1] sd 0:0:1:0: tag#3022 CDB: opcode=0xe5 (vendor) [ 2270.110478][ C1] sd 0:0:1:0: tag#3022 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2270.113837][T14531] loop2: detected capacity change from 0 to 4 [ 2270.119546][ C1] sd 0:0:1:0: tag#3022 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2270.134658][ C1] sd 0:0:1:0: tag#3022 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2270.279110][T14531] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2270.292450][T14524] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2270.299049][T14531] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2270.356985][T14524] loop4: detected capacity change from 0 to 4 [ 2270.383869][T14524] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2270.421565][T14531] loop2: detected capacity change from 0 to 4 [ 2270.451838][T14531] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:22 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x22, 0x100000fe) 21:47:22 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2270.468918][T14531] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2270.517410][T14554] loop4: detected capacity change from 0 to 4 [ 2270.540762][ C0] sd 0:0:1:0: tag#3058 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2270.550631][ C0] sd 0:0:1:0: tag#3058 CDB: opcode=0xe5 (vendor) [ 2270.553033][T14554] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2270.557019][ C0] sd 0:0:1:0: tag#3058 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2270.557039][ C0] sd 0:0:1:0: tag#3058 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2270.584371][ C0] sd 0:0:1:0: tag#3058 CDB[20]: 80 19 84 20 e0 6c bb 21:47:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000f00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2270.638906][ C1] sd 0:0:1:0: tag#3064 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2270.648767][ C1] sd 0:0:1:0: tag#3064 CDB: opcode=0xe5 (vendor) [ 2270.655133][ C1] sd 0:0:1:0: tag#3064 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2270.664251][ C1] sd 0:0:1:0: tag#3064 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2270.673365][ C1] sd 0:0:1:0: tag#3064 CDB[20]: 80 19 [ 2270.689703][T14554] loop4: detected capacity change from 0 to 4 [ 2270.710610][T14567] loop2: detected capacity change from 0 to 4 [ 2270.720420][T14554] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2270.757492][T14567] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2270.767012][T14567] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:23 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x12, 0x100000fe) [ 2270.827233][T14567] loop2: detected capacity change from 0 to 4 [ 2270.849011][T14567] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2270.855809][T14584] loop4: detected capacity change from 0 to 4 [ 2270.886131][ C1] sd 0:0:1:0: tag#3019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2270.896001][ C1] sd 0:0:1:0: tag#3019 CDB: opcode=0xe5 (vendor) [ 2270.902330][ C1] sd 0:0:1:0: tag#3019 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2270.911391][ C1] sd 0:0:1:0: tag#3019 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2270.920442][ C1] sd 0:0:1:0: tag#3019 CDB[20]: 80 19 84 20 e0 6c bb [ 2270.964846][T14567] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2271.029700][ C1] sd 0:0:1:0: tag#3033 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2271.040609][ C1] sd 0:0:1:0: tag#3033 CDB: opcode=0xe5 (vendor) [ 2271.047022][ C1] sd 0:0:1:0: tag#3033 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2271.056060][ C1] sd 0:0:1:0: tag#3033 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2271.065099][ C1] sd 0:0:1:0: tag#3033 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000041000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2271.147488][T14584] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:23 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x24e, 0x100000fe) [ 2271.228520][T14584] loop4: detected capacity change from 0 to 4 [ 2271.246810][T14605] loop2: detected capacity change from 0 to 4 [ 2271.261750][T14584] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2271.275924][T14605] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2271.290507][ C1] sd 0:0:1:0: tag#3051 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2271.300362][ C1] sd 0:0:1:0: tag#3051 CDB: opcode=0xe5 (vendor) [ 2271.300794][T14605] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2271.306713][ C1] sd 0:0:1:0: tag#3051 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2271.306733][ C1] sd 0:0:1:0: tag#3051 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2271.334206][ C1] sd 0:0:1:0: tag#3051 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:23 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x14, 0x100000fe) 21:47:23 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2271.559591][T14605] loop2: detected capacity change from 0 to 4 [ 2271.574693][T14605] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:23 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6a, 0x100000fe) [ 2271.623755][T14605] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2271.662244][T14633] loop4: detected capacity change from 0 to 4 21:47:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000201000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2271.688791][T14633] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2271.774440][T14646] loop2: detected capacity change from 0 to 4 [ 2271.789216][T14633] loop4: detected capacity change from 0 to 4 [ 2271.816977][T14646] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2271.835955][T14633] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2271.872488][T14646] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2271.943575][T14660] loop4: detected capacity change from 0 to 4 [ 2271.965727][T14646] loop2: detected capacity change from 0 to 4 [ 2271.972182][T14660] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2271.994277][T14646] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2272.040057][T14646] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.044295][T14660] loop4: detected capacity change from 0 to 4 21:47:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000001100000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2272.099884][T14660] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:24 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x24f, 0x100000fe) [ 2272.201806][T14678] loop2: detected capacity change from 0 to 4 [ 2272.218070][T14678] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2272.250742][T14678] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.279910][T14692] loop4: detected capacity change from 0 to 4 [ 2272.310595][T14692] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.339158][T14678] loop2: detected capacity change from 0 to 4 [ 2272.356964][T14678] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2272.389336][T14678] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.406951][T14692] loop4: detected capacity change from 0 to 4 [ 2272.425113][T14692] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000001200000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:24 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2272.560899][T14720] loop4: detected capacity change from 0 to 4 [ 2272.581991][T14720] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.637027][T14729] loop2: detected capacity change from 0 to 4 [ 2272.661778][T14729] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:25 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6b, 0x100000fe) [ 2272.687908][T14729] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.714930][T14720] loop4: detected capacity change from 0 to 4 21:47:25 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x22, 0x100000fe) [ 2272.744086][T14720] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.761253][T14729] loop2: detected capacity change from 0 to 4 [ 2272.780461][T14729] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600004100f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2272.851381][T14729] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.891453][T14756] loop4: detected capacity change from 0 to 4 21:47:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000011500000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2272.930388][T14756] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2272.996542][T14756] loop4: detected capacity change from 0 to 4 [ 2273.006848][T14771] loop2: detected capacity change from 0 to 4 [ 2273.016455][T14771] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2273.025709][T14756] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2273.067087][T14771] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600020100f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2273.148461][T14771] loop2: detected capacity change from 0 to 4 [ 2273.175816][T14771] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2273.187077][T14791] loop4: detected capacity change from 0 to 4 [ 2273.215353][T14771] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2273.225783][T14791] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000002000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:25 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x300, 0x100000fe) [ 2273.286857][T14791] loop4: detected capacity change from 0 to 4 [ 2273.314980][T14791] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000110f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2273.434459][T14817] loop2: detected capacity change from 0 to 4 [ 2273.451403][T14818] loop4: detected capacity change from 0 to 4 [ 2273.467761][T14817] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2273.488359][T14818] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2273.506585][T14817] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2273.567254][T14817] loop2: detected capacity change from 0 to 4 [ 2273.585054][T14817] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2273.612988][T14818] loop4: detected capacity change from 0 to 4 [ 2273.622685][T14817] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:25 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2273.657895][T14818] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000102000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000120f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2273.748890][T14852] loop2: detected capacity change from 0 to 4 [ 2273.783667][T14852] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:26 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x78, 0x100000fe) [ 2273.807045][T14852] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2273.878186][T14852] loop2: detected capacity change from 0 to 4 [ 2273.899055][T14852] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2273.910702][T14870] loop4: detected capacity change from 0 to 4 21:47:26 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7c, 0x100000fe) [ 2273.936382][T14852] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2273.960779][T14870] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000002200000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2274.017678][T14870] loop4: detected capacity change from 0 to 4 [ 2274.056055][T14870] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2274.101656][T14890] loop2: detected capacity change from 0 to 4 21:47:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000200f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2274.151710][T14890] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2274.201913][T14890] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2274.207635][T14899] loop4: detected capacity change from 0 to 4 [ 2274.246925][T14899] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2274.299038][T14890] loop2: detected capacity change from 0 to 4 [ 2274.310077][T14899] loop4: detected capacity change from 0 to 4 [ 2274.316347][T14890] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2274.336326][T14899] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:26 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x402, 0x100000fe) [ 2274.360448][T14890] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2274.404581][ C0] scsi_io_completion_action: 13 callbacks suppressed [ 2274.404607][ C0] sd 0:0:1:0: tag#3052 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2274.421152][ C0] sd 0:0:1:0: tag#3052 CDB: opcode=0xe5 (vendor) [ 2274.427524][ C0] sd 0:0:1:0: tag#3052 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2274.436572][ C0] sd 0:0:1:0: tag#3052 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2274.445628][ C0] sd 0:0:1:0: tag#3052 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600010200f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000002500000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2274.592686][T14930] loop4: detected capacity change from 0 to 4 21:47:27 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2274.638857][T14930] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2274.639250][T14936] loop2: detected capacity change from 0 to 4 [ 2274.692625][T14936] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2274.710778][T14936] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2274.725931][ C0] sd 0:0:1:0: tag#3071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2274.735810][ C0] sd 0:0:1:0: tag#3071 CDB: opcode=0xe5 (vendor) [ 2274.742137][ C0] sd 0:0:1:0: tag#3071 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2274.751197][ C0] sd 0:0:1:0: tag#3071 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2274.760249][ C0] sd 0:0:1:0: tag#3071 CDB[20]: 80 19 [ 2274.769345][T14930] loop4: detected capacity change from 0 to 4 [ 2274.874212][T14930] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2274.882838][ C0] sd 0:0:1:0: tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2274.893379][ C0] sd 0:0:1:0: tag#3025 CDB: opcode=0xe5 (vendor) [ 2274.899706][ C0] sd 0:0:1:0: tag#3025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2274.908768][ C0] sd 0:0:1:0: tag#3025 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2274.917822][ C0] sd 0:0:1:0: tag#3025 CDB[20]: 80 19 84 20 e0 6c bb 21:47:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000220f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:27 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x79, 0x100000fe) [ 2274.979298][T14936] loop2: detected capacity change from 0 to 4 [ 2274.994687][T14936] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2275.013017][T14936] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000002e00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2275.074175][T14968] loop4: detected capacity change from 0 to 4 [ 2275.128922][T14968] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2275.131126][T14974] loop2: detected capacity change from 0 to 4 21:47:27 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7d, 0x100000fe) [ 2275.197017][T14974] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2275.223696][T14974] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2275.225596][T14968] loop4: detected capacity change from 0 to 4 [ 2275.287198][T14974] loop2: detected capacity change from 0 to 4 [ 2275.295633][ C0] sd 0:0:1:0: tag#3061 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2275.305545][ C0] sd 0:0:1:0: tag#3061 CDB: opcode=0xe5 (vendor) [ 2275.311893][ C0] sd 0:0:1:0: tag#3061 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2275.314841][ C1] sd 0:0:1:0: tag#3062 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2275.320940][ C0] sd 0:0:1:0: tag#3061 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2275.330822][ C1] sd 0:0:1:0: tag#3062 CDB: opcode=0xe5 (vendor) [ 2275.340445][ C0] sd 0:0:1:0: tag#3061 CDB[20]: 80 19 84 20 e0 6c bb [ 2275.353472][ C1] sd 0:0:1:0: tag#3062 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2275.362606][ C1] sd 0:0:1:0: tag#3062 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2275.371664][ C1] sd 0:0:1:0: tag#3062 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2275.482323][T14974] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2275.493622][T14968] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2275.496899][T14974] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000250f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000003f00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:27 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:28 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x406, 0x100000fe) [ 2275.664973][T15002] loop4: detected capacity change from 0 to 4 [ 2275.692148][T15002] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2275.716273][T15011] loop2: detected capacity change from 0 to 4 [ 2275.728743][ C0] sd 0:0:1:0: tag#3049 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2275.731332][ C1] sd 0:0:1:0: tag#3050 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2275.738611][ C0] sd 0:0:1:0: tag#3049 CDB: opcode=0xe5 (vendor) [ 2275.748512][ C1] sd 0:0:1:0: tag#3050 CDB: opcode=0xe5 (vendor) [ 2275.754846][ C0] sd 0:0:1:0: tag#3049 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2275.761146][ C1] sd 0:0:1:0: tag#3050 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2275.770147][ C0] sd 0:0:1:0: tag#3049 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2275.779238][ C1] sd 0:0:1:0: tag#3050 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2275.788698][ C0] sd 0:0:1:0: tag#3049 CDB[20]: 80 19 [ 2275.797784][ C1] sd 0:0:1:0: tag#3050 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:28 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc0, 0x100000fe) [ 2276.078609][T15011] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2276.101429][T15011] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2276.102615][T15002] loop4: detected capacity change from 0 to 4 [ 2276.177982][T15002] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2276.194546][T15011] loop2: detected capacity change from 0 to 4 [ 2276.223531][T15011] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2276.277838][T15011] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000004000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:28 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x91, 0x100000fe) [ 2276.422357][T15049] loop4: detected capacity change from 0 to 4 [ 2276.442728][T15056] loop2: detected capacity change from 0 to 4 [ 2276.459242][T15049] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2276.476738][T15056] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2276.486508][ C1] sd 0:0:1:0: tag#3022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2276.496351][ C1] sd 0:0:1:0: tag#3022 CDB: opcode=0xe5 (vendor) [ 2276.502688][ C1] sd 0:0:1:0: tag#3022 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2276.511931][ C1] sd 0:0:1:0: tag#3022 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2276.519365][T15056] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2276.521069][ C1] sd 0:0:1:0: tag#3022 CDB[20]: 80 19 84 20 e0 6c bb [ 2276.616853][ C1] sd 0:0:1:0: tag#3042 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2276.626735][ C1] sd 0:0:1:0: tag#3042 CDB: opcode=0xe5 (vendor) [ 2276.633073][ C1] sd 0:0:1:0: tag#3042 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2276.642185][ C1] sd 0:0:1:0: tag#3042 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2276.651275][ C1] sd 0:0:1:0: tag#3042 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:29 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x500, 0x100000fe) [ 2276.757984][T15049] loop4: detected capacity change from 0 to 4 [ 2276.763784][T15056] loop2: detected capacity change from 0 to 4 [ 2276.775887][T15049] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2276.785501][T15056] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:29 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000003f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2276.846218][T15056] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2276.868291][ C1] sd 0:0:1:0: tag#3064 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2276.878133][ C1] sd 0:0:1:0: tag#3064 CDB: opcode=0xe5 (vendor) [ 2276.884488][ C1] sd 0:0:1:0: tag#3064 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2276.893543][ C1] sd 0:0:1:0: tag#3064 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2276.902573][ C1] sd 0:0:1:0: tag#3064 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000004800000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2277.078152][T15090] loop4: detected capacity change from 0 to 4 [ 2277.085930][T15093] loop2: detected capacity change from 0 to 4 [ 2277.115033][T15093] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2277.142633][T15090] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2277.152166][T15093] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:29 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x181, 0x100000fe) [ 2277.227745][T15090] loop4: detected capacity change from 0 to 4 [ 2277.229592][T15093] loop2: detected capacity change from 0 to 4 [ 2277.247408][T15090] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2277.256950][T15093] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2277.295863][T15093] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000400f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000004c00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2277.403705][T15123] loop4: detected capacity change from 0 to 4 [ 2277.452038][T15123] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2277.486986][T15132] loop2: detected capacity change from 0 to 4 [ 2277.521041][T15132] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2277.562771][T15123] loop4: detected capacity change from 0 to 4 [ 2277.569257][T15132] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2277.576822][T15123] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000480f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:30 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x92, 0x100000fe) [ 2277.673782][T15132] loop2: detected capacity change from 0 to 4 [ 2277.698401][T15132] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2277.715064][T15152] loop4: detected capacity change from 0 to 4 [ 2277.753337][T15132] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2277.773667][T15152] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000006000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:30 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2277.816405][T15152] loop4: detected capacity change from 0 to 4 [ 2277.845511][T15152] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:30 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x600, 0x100000fe) 21:47:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000004c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2277.974511][T15178] loop2: detected capacity change from 0 to 4 [ 2278.010079][T15178] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2278.023247][T15184] loop4: detected capacity change from 0 to 4 [ 2278.051847][T15178] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2278.061470][T15184] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2278.146620][T15178] loop2: detected capacity change from 0 to 4 [ 2278.154252][T15184] loop4: detected capacity change from 0 to 4 [ 2278.170522][T15184] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2278.184523][T15178] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2278.212721][T15178] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000600f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000006800000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:30 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x204, 0x100000fe) [ 2278.334737][T15213] loop4: detected capacity change from 0 to 4 [ 2278.354437][T15213] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2278.360013][T15216] loop2: detected capacity change from 0 to 4 [ 2278.403107][T15216] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2278.425354][T15213] loop4: detected capacity change from 0 to 4 [ 2278.442314][T15216] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2278.454170][T15213] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000680f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2278.537082][T15216] loop2: detected capacity change from 0 to 4 [ 2278.557480][T15216] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2278.604190][T15216] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2278.643710][T15243] loop4: detected capacity change from 0 to 4 21:47:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000006c00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2278.660946][T15243] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2278.737646][T15243] loop4: detected capacity change from 0 to 4 [ 2278.769102][T15243] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000006c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2278.811491][T15261] loop2: detected capacity change from 0 to 4 [ 2278.849814][T15261] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:31 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2278.870904][T15269] loop4: detected capacity change from 0 to 4 [ 2278.901857][T15261] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:31 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x93, 0x100000fe) [ 2278.927589][T15269] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000007400000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2278.985129][T15269] loop4: detected capacity change from 0 to 4 [ 2279.007292][T15269] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x604, 0x100000fe) 21:47:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000740f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2279.082044][T15294] loop2: detected capacity change from 0 to 4 [ 2279.139957][T15294] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2279.172053][T15309] loop4: detected capacity change from 0 to 4 [ 2279.189758][T15294] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2279.219502][T15309] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2279.274184][T15294] loop2: detected capacity change from 0 to 4 [ 2279.287322][T15309] loop4: detected capacity change from 0 to 4 [ 2279.312949][T15294] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2279.331518][T15309] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000007a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2279.376427][T15294] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000007a00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:31 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x300, 0x100000fe) [ 2279.534562][T15338] loop4: detected capacity change from 0 to 4 [ 2279.544035][T15339] loop2: detected capacity change from 0 to 4 21:47:31 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2279.580275][T15338] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2279.592052][T15339] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2279.615721][T15339] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2279.664961][T15338] loop4: detected capacity change from 0 to 4 [ 2279.678440][T15338] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2279.701900][T15339] loop2: detected capacity change from 0 to 4 [ 2279.713959][T15339] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2279.725109][ C1] scsi_io_completion_action: 9 callbacks suppressed [ 2279.725137][ C1] sd 0:0:1:0: tag#3033 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2279.741581][ C1] sd 0:0:1:0: tag#3033 CDB: opcode=0xe5 (vendor) [ 2279.747947][ C1] sd 0:0:1:0: tag#3033 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:47:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000fffe0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2279.756981][ C1] sd 0:0:1:0: tag#3033 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2279.757262][T15339] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2279.766082][ C1] sd 0:0:1:0: tag#3033 CDB[20]: 80 19 21:47:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000001aa00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2279.941093][T15368] loop4: detected capacity change from 0 to 4 [ 2279.980627][T15368] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2280.012727][ C0] sd 0:0:1:0: tag#3067 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2280.022603][ C0] sd 0:0:1:0: tag#3067 CDB: opcode=0xe5 (vendor) [ 2280.028972][ C0] sd 0:0:1:0: tag#3067 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2280.038028][ C0] sd 0:0:1:0: tag#3067 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2280.047529][ C0] sd 0:0:1:0: tag#3067 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:32 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc0, 0x100000fe) [ 2280.062278][T15379] loop2: detected capacity change from 0 to 4 [ 2280.071963][T15379] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2280.087329][T15379] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2280.106775][T15368] loop4: detected capacity change from 0 to 4 [ 2280.146702][T15379] loop2: detected capacity change from 0 to 4 [ 2280.156028][T15368] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2280.165763][ C0] sd 0:0:1:0: tag#3033 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2280.175645][ C0] sd 0:0:1:0: tag#3033 CDB: opcode=0xe5 (vendor) [ 2280.181987][ C0] sd 0:0:1:0: tag#3033 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2280.191044][ C0] sd 0:0:1:0: tag#3033 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2280.200110][ C0] sd 0:0:1:0: tag#3033 CDB[20]: 80 19 84 20 e0 6c bb [ 2280.200241][T15379] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000fff0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2280.280427][T15379] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x700, 0x100000fe) 21:47:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000001ab00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2280.387735][ C1] sd 0:0:1:0: tag#3039 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2280.397590][ C1] sd 0:0:1:0: tag#3039 CDB: opcode=0xe5 (vendor) [ 2280.403947][ C1] sd 0:0:1:0: tag#3039 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2280.412982][ C1] sd 0:0:1:0: tag#3039 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2280.422025][ C1] sd 0:0:1:0: tag#3039 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2280.429555][T15405] loop4: detected capacity change from 0 to 4 [ 2280.523099][T15405] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2280.565223][T15405] loop4: detected capacity change from 0 to 4 [ 2280.566164][T15419] loop2: detected capacity change from 0 to 4 [ 2280.579811][T15405] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:32 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x402, 0x100000fe) 21:47:32 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2280.631929][T15419] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2280.653939][T15419] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000feff0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2280.678309][ C1] sd 0:0:1:0: tag#3066 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2280.688172][ C1] sd 0:0:1:0: tag#3066 CDB: opcode=0xe5 (vendor) [ 2280.694533][ C1] sd 0:0:1:0: tag#3066 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2280.703677][ C1] sd 0:0:1:0: tag#3066 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2280.712730][ C1] sd 0:0:1:0: tag#3066 CDB[20]: 80 19 [ 2280.728246][T15435] loop4: detected capacity change from 0 to 4 [ 2280.853834][T15435] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2280.899699][T15419] loop2: detected capacity change from 0 to 4 [ 2280.909327][T15435] loop4: detected capacity change from 0 to 4 [ 2280.934541][T15435] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2280.949062][T15419] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000003000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2281.010271][T15419] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2281.065624][ C1] sd 0:0:1:0: tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2281.075863][ C1] sd 0:0:1:0: tag#3025 CDB: opcode=0xe5 (vendor) [ 2281.082198][ C1] sd 0:0:1:0: tag#3025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2281.091522][ C1] sd 0:0:1:0: tag#3025 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2281.092662][T15460] loop4: detected capacity change from 0 to 4 [ 2281.100770][ C1] sd 0:0:1:0: tag#3025 CDB[20]: 80 19 84 20 e0 6c bb 21:47:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000c0ed00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2281.221579][T15460] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2281.280449][ C1] sd 0:0:1:0: tag#3069 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2281.290303][ C1] sd 0:0:1:0: tag#3069 CDB: opcode=0xe5 (vendor) [ 2281.296657][ C1] sd 0:0:1:0: tag#3069 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2281.305720][ C1] sd 0:0:1:0: tag#3069 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2281.314772][ C1] sd 0:0:1:0: tag#3069 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:33 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x204, 0x100000fe) [ 2281.408871][T15473] loop2: detected capacity change from 0 to 4 [ 2281.429125][T15460] loop4: detected capacity change from 0 to 4 [ 2281.442732][T15473] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:33 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2281.476652][T15460] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2281.507696][ C1] sd 0:0:1:0: tag#3038 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2281.517545][ C1] sd 0:0:1:0: tag#3038 CDB: opcode=0xe5 (vendor) 21:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000005000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2281.523889][ C1] sd 0:0:1:0: tag#3038 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2281.532912][ C1] sd 0:0:1:0: tag#3038 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2281.537550][T15473] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2281.541953][ C1] sd 0:0:1:0: tag#3038 CDB[20]: 80 19 84 20 e0 6c bb 21:47:34 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x900, 0x100000fe) [ 2281.633306][ C1] sd 0:0:1:0: tag#3052 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2281.643165][ C1] sd 0:0:1:0: tag#3052 CDB: opcode=0xe5 (vendor) [ 2281.649512][ C1] sd 0:0:1:0: tag#3052 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2281.658557][ C1] sd 0:0:1:0: tag#3052 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2281.667606][ C1] sd 0:0:1:0: tag#3052 CDB[20]: 80 19 [ 2281.737435][T15473] loop2: detected capacity change from 0 to 4 [ 2281.763090][T15473] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2281.783687][ C0] sd 0:0:1:0: tag#3029 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2281.793572][ C0] sd 0:0:1:0: tag#3029 CDB: opcode=0xe5 (vendor) [ 2281.799913][ C0] sd 0:0:1:0: tag#3029 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2281.808965][ C0] sd 0:0:1:0: tag#3029 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2281.818026][ C0] sd 0:0:1:0: tag#3029 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2281.834219][T15504] loop4: detected capacity change from 0 to 4 21:47:34 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x406, 0x100000fe) [ 2281.908067][T15473] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2281.928893][T15504] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000001fa00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2282.023833][T15504] loop4: detected capacity change from 0 to 4 [ 2282.045283][T15504] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2282.080020][T15521] loop2: detected capacity change from 0 to 4 [ 2282.112672][T15521] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000006000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2282.137428][T15521] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2282.211810][T15521] loop2: detected capacity change from 0 to 4 [ 2282.237370][T15521] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2282.249563][T15531] loop4: detected capacity change from 0 to 4 [ 2282.272637][T15521] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2282.284386][T15531] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fffe00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:34 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x300, 0x100000fe) [ 2282.369677][T15531] loop4: detected capacity change from 0 to 4 [ 2282.399503][T15531] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000007000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:34 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2282.449034][T15555] loop2: detected capacity change from 0 to 4 [ 2282.472992][T15555] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2282.488353][T15555] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2282.569545][T15555] loop2: detected capacity change from 0 to 4 [ 2282.583338][T15565] loop4: detected capacity change from 0 to 4 [ 2282.604842][T15555] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2282.621022][T15565] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2282.645561][T15555] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:35 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa00, 0x100000fe) 21:47:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000fff00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2282.686924][T15565] loop4: detected capacity change from 0 to 4 [ 2282.725726][T15565] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000009000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2282.849221][T15598] loop2: detected capacity change from 0 to 4 [ 2282.870653][T15604] loop4: detected capacity change from 0 to 4 [ 2282.902503][T15598] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2282.919352][T15604] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2282.943301][T15598] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:35 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x500, 0x100000fe) [ 2283.003825][T15604] loop4: detected capacity change from 0 to 4 [ 2283.026928][T15598] loop2: detected capacity change from 0 to 4 [ 2283.027201][T15604] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2283.043962][T15598] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2283.080715][T15598] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000a000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000feff00000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2283.197926][T15628] loop4: detected capacity change from 0 to 4 [ 2283.230877][T15628] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2283.288957][T15637] loop2: detected capacity change from 0 to 4 [ 2283.332069][T15637] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2283.333147][T15628] loop4: detected capacity change from 0 to 4 [ 2283.395026][T15628] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2283.409103][T15637] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000b000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2283.496737][T15637] loop2: detected capacity change from 0 to 4 [ 2283.512242][T15637] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:35 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x402, 0x100000fe) [ 2283.556032][T15637] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2283.566249][T15659] loop4: detected capacity change from 0 to 4 [ 2283.615214][T15659] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000002000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2283.715116][T15659] loop4: detected capacity change from 0 to 4 [ 2283.738260][T15659] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:36 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb00, 0x100000fe) [ 2283.768061][T15683] loop2: detected capacity change from 0 to 4 21:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000c000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2283.815366][T15683] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2283.881947][T15683] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2283.895454][T15698] loop4: detected capacity change from 0 to 4 [ 2283.918726][T15698] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000d000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2284.004710][T15683] loop2: detected capacity change from 0 to 4 [ 2284.028675][T15683] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:36 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x600, 0x100000fe) [ 2284.052256][T15713] loop4: detected capacity change from 0 to 4 [ 2284.066600][T15683] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.091267][T15713] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000004000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2284.145986][T15713] loop4: detected capacity change from 0 to 4 [ 2284.177778][T15713] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.198694][T15732] loop2: detected capacity change from 0 to 4 [ 2284.236523][T15732] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000e000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2284.287141][T15732] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.339559][T15741] loop4: detected capacity change from 0 to 4 [ 2284.361496][T15741] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.395852][T15732] loop2: detected capacity change from 0 to 4 [ 2284.423506][T15732] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2284.453585][T15741] loop4: detected capacity change from 0 to 4 [ 2284.469589][T15741] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.481830][T15732] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000008000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:36 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2284.620363][T15769] loop4: detected capacity change from 0 to 4 [ 2284.658929][T15769] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.663460][T15782] loop2: detected capacity change from 0 to 4 [ 2284.720212][T15782] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2284.749969][T15769] loop4: detected capacity change from 0 to 4 21:47:37 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x406, 0x100000fe) [ 2284.762193][T15782] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.811415][T15769] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2284.825110][ C1] scsi_io_completion_action: 12 callbacks suppressed [ 2284.825151][ C1] sd 0:0:1:0: tag#3046 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2284.841672][ C1] sd 0:0:1:0: tag#3046 CDB: opcode=0xe5 (vendor) [ 2284.848053][ C1] sd 0:0:1:0: tag#3046 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:47:37 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc00, 0x100000fe) [ 2284.857128][ C1] sd 0:0:1:0: tag#3046 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2284.866174][ C1] sd 0:0:1:0: tag#3046 CDB[20]: 80 19 84 20 e0 6c bb [ 2284.966846][ C1] sd 0:0:1:0: tag#3047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2284.976741][ C1] sd 0:0:1:0: tag#3047 CDB: opcode=0xe5 (vendor) [ 2284.983087][ C1] sd 0:0:1:0: tag#3047 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2284.992208][ C1] sd 0:0:1:0: tag#3047 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2285.001291][ C1] sd 0:0:1:0: tag#3047 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2285.016565][T15782] loop2: detected capacity change from 0 to 4 21:47:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000030f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2285.096089][T15782] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2285.129090][T15782] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000400008000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:37 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x604, 0x100000fe) [ 2285.214884][T15815] loop4: detected capacity change from 0 to 4 [ 2285.240790][T15815] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2285.332308][T15828] loop2: detected capacity change from 0 to 4 [ 2285.350265][T15835] loop4: detected capacity change from 0 to 4 [ 2285.381314][T15835] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2285.397429][T15828] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2285.435867][T15828] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2285.477404][T15835] loop4: detected capacity change from 0 to 4 [ 2285.504940][T15835] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2285.537540][ C0] sd 0:0:1:0: tag#3020 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2285.547409][ C0] sd 0:0:1:0: tag#3020 CDB: opcode=0xe5 (vendor) [ 2285.553771][ C0] sd 0:0:1:0: tag#3020 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2285.562912][ C0] sd 0:0:1:0: tag#3020 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2285.572145][ C0] sd 0:0:1:0: tag#3020 CDB[20]: 80 19 84 20 e0 6c bb 21:47:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000050f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2285.582330][T15828] loop2: detected capacity change from 0 to 4 [ 2285.606173][T15828] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:38 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x40e, 0x100000fe) [ 2285.663788][T15828] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000000c000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:38 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2285.765163][ C0] sd 0:0:1:0: tag#3031 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2285.775044][ C0] sd 0:0:1:0: tag#3031 CDB: opcode=0xe5 (vendor) [ 2285.781384][ C0] sd 0:0:1:0: tag#3031 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2285.783326][T15869] loop4: detected capacity change from 0 to 4 [ 2285.790455][ C0] sd 0:0:1:0: tag#3031 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2285.805505][ C0] sd 0:0:1:0: tag#3031 CDB[20]: 80 19 84 20 e0 6c bb [ 2285.815689][ C1] sd 0:0:1:0: tag#3032 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2285.825532][ C1] sd 0:0:1:0: tag#3032 CDB: opcode=0xe5 (vendor) [ 2285.828577][T15871] loop2: detected capacity change from 0 to 4 [ 2285.831942][ C1] sd 0:0:1:0: tag#3032 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2285.831964][ C1] sd 0:0:1:0: tag#3032 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2285.856074][ C1] sd 0:0:1:0: tag#3032 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2285.891935][T15871] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2285.910811][T15869] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2285.928461][T15871] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2285.956909][ C0] sd 0:0:1:0: tag#3033 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2285.966792][ C0] sd 0:0:1:0: tag#3033 CDB: opcode=0xe5 (vendor) [ 2285.973179][ C0] sd 0:0:1:0: tag#3033 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2285.982213][ C0] sd 0:0:1:0: tag#3033 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2285.991273][ C0] sd 0:0:1:0: tag#3033 CDB[20]: 80 19 [ 2286.015375][T15871] loop2: detected capacity change from 0 to 4 [ 2286.017970][T15869] loop4: detected capacity change from 0 to 4 [ 2286.026918][T15871] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2286.052158][T15871] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:38 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1200, 0x100000fe) [ 2286.073965][T15869] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000040000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000060f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2286.156274][ C1] sd 0:0:1:0: tag#3050 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2286.166159][ C1] sd 0:0:1:0: tag#3050 CDB: opcode=0xe5 (vendor) [ 2286.172489][ C1] sd 0:0:1:0: tag#3050 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2286.173692][T15908] loop2: detected capacity change from 0 to 4 [ 2286.181559][ C1] sd 0:0:1:0: tag#3050 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2286.196638][ C1] sd 0:0:1:0: tag#3050 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2286.259918][T15914] loop4: detected capacity change from 0 to 4 [ 2286.266469][T15908] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2286.291414][T15908] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2286.369096][T15914] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2286.395811][T15908] loop2: detected capacity change from 0 to 4 [ 2286.413519][T15908] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:38 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x700, 0x100000fe) [ 2286.455914][T15914] loop4: detected capacity change from 0 to 4 [ 2286.473208][T15908] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2286.497862][T15914] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000ffffe0000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000070f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2286.644917][ C0] sd 0:0:1:0: tag#3022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2286.647394][T15945] loop4: detected capacity change from 0 to 4 [ 2286.654789][ C0] sd 0:0:1:0: tag#3022 CDB: opcode=0xe5 (vendor) [ 2286.667214][ C0] sd 0:0:1:0: tag#3022 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2286.676263][ C0] sd 0:0:1:0: tag#3022 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2286.685525][ C0] sd 0:0:1:0: tag#3022 CDB[20]: 80 19 84 20 e0 6c bb [ 2286.717107][T15945] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2286.775642][T15962] loop2: detected capacity change from 0 to 4 [ 2286.807227][T15945] loop4: detected capacity change from 0 to 4 [ 2286.814088][T15962] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:39 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2286.832742][T15945] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2286.845724][T15962] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000080f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:39 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x500, 0x100000fe) [ 2286.921713][T15962] loop2: detected capacity change from 0 to 4 [ 2286.941702][T15962] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2286.943036][ C0] sd 0:0:1:0: tag#3070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2286.959874][T15980] loop4: detected capacity change from 0 to 4 [ 2286.960663][ C0] sd 0:0:1:0: tag#3070 CDB: opcode=0xe5 (vendor) [ 2286.973133][ C0] sd 0:0:1:0: tag#3070 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2286.982195][ C0] sd 0:0:1:0: tag#3070 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2286.982486][T15962] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2286.991249][ C0] sd 0:0:1:0: tag#3070 CDB[20]: 80 19 [ 2287.104810][T15980] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2287.104818][ C0] sd 0:0:1:0: tag#3008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2287.104841][ C0] sd 0:0:1:0: tag#3008 CDB: opcode=0xe5 (vendor) [ 2287.104861][ C0] sd 0:0:1:0: tag#3008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2287.104877][ C0] sd 0:0:1:0: tag#3008 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 21:47:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000010001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2287.104899][ C0] sd 0:0:1:0: tag#3008 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:39 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2200, 0x100000fe) [ 2287.200624][T15980] loop4: detected capacity change from 0 to 4 [ 2287.217039][T15980] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000090f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2287.277201][T16003] loop2: detected capacity change from 0 to 4 [ 2287.317400][T16003] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2287.366047][T16003] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2287.372031][T16015] loop4: detected capacity change from 0 to 4 [ 2287.408185][T16015] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2287.465963][T16003] loop2: detected capacity change from 0 to 4 [ 2287.481125][T16003] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2287.514545][T16003] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2287.518605][T16015] loop4: detected capacity change from 0 to 4 21:47:39 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x900, 0x100000fe) 21:47:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000015010001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2287.563086][T16015] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2287.649621][T16041] loop2: detected capacity change from 0 to 4 [ 2287.677171][T16041] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2287.689651][T16047] loop4: detected capacity change from 0 to 4 [ 2287.710922][T16047] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2287.721136][T16041] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2287.791819][T16041] loop2: detected capacity change from 0 to 4 [ 2287.798920][T16047] loop4: detected capacity change from 0 to 4 [ 2287.823844][T16041] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:40 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2287.856807][T16041] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2287.868685][T16047] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000020001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2288.035274][T16074] loop2: detected capacity change from 0 to 4 [ 2288.040300][T16078] loop4: detected capacity change from 0 to 4 [ 2288.060352][T16074] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2288.078582][T16078] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2288.097286][T16074] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:40 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x600, 0x100000fe) [ 2288.178545][T16078] loop4: detected capacity change from 0 to 4 [ 2288.197020][T16074] loop2: detected capacity change from 0 to 4 [ 2288.208924][T16078] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2288.231168][T16074] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2288.267761][T16074] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000004020001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:40 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3f00, 0x100000fe) [ 2288.382994][T16112] loop4: detected capacity change from 0 to 4 [ 2288.421358][T16112] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2288.453366][T16122] loop2: detected capacity change from 0 to 4 [ 2288.488328][T16122] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2288.514120][T16112] loop4: detected capacity change from 0 to 4 [ 2288.521805][T16112] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2288.540594][T16122] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:40 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa00, 0x100000fe) [ 2288.619174][T16122] loop2: detected capacity change from 0 to 4 [ 2288.640008][T16122] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2288.652188][T16146] loop4: detected capacity change from 0 to 4 [ 2288.679262][T16122] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2288.698709][T16146] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000030001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2288.776477][T16146] loop4: detected capacity change from 0 to 4 [ 2288.798237][T16146] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2288.818915][T16162] loop2: detected capacity change from 0 to 4 21:47:41 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2288.839749][T16162] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2288.862038][T16162] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2288.951122][T16176] loop4: detected capacity change from 0 to 4 [ 2288.973742][T16162] loop2: detected capacity change from 0 to 4 [ 2288.988169][T16176] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2289.002561][T16162] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2289.036440][T16162] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000040001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2289.086933][T16176] loop4: detected capacity change from 0 to 4 [ 2289.113353][T16176] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2289.191585][T16200] loop2: detected capacity change from 0 to 4 [ 2289.228209][T16200] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2289.265556][T16200] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2289.289595][T16208] loop4: detected capacity change from 0 to 4 21:47:41 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x604, 0x100000fe) [ 2289.333289][T16208] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2289.350822][T16200] loop2: detected capacity change from 0 to 4 [ 2289.360826][T16200] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2289.388645][T16200] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:41 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4000, 0x100000fe) 21:47:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000050001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2289.463692][T16208] loop4: detected capacity change from 0 to 4 [ 2289.498250][T16208] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2289.543338][T16237] loop2: detected capacity change from 0 to 4 21:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000100f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2289.589441][T16237] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2289.657273][T16237] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2289.673303][T16252] loop4: detected capacity change from 0 to 4 [ 2289.707280][T16252] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2289.744612][T16237] loop2: detected capacity change from 0 to 4 21:47:42 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb00, 0x100000fe) [ 2289.771265][T16237] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2289.784480][T16252] loop4: detected capacity change from 0 to 4 21:47:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000110f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2289.816807][T16252] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2289.841781][T16237] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000060001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:42 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2289.944238][ C0] scsi_io_completion_action: 11 callbacks suppressed [ 2289.944270][ C0] sd 0:0:1:0: tag#3047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2289.952974][T16278] loop4: detected capacity change from 0 to 4 [ 2289.960847][ C0] sd 0:0:1:0: tag#3047 CDB: opcode=0xe5 (vendor) [ 2289.973291][ C0] sd 0:0:1:0: tag#3047 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2289.982580][ C0] sd 0:0:1:0: tag#3047 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2289.991719][ C0] sd 0:0:1:0: tag#3047 CDB[20]: 80 19 [ 2290.031316][T16278] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2290.038268][T16287] loop2: detected capacity change from 0 to 4 [ 2290.063765][T16287] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2290.073666][T16287] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2290.136161][T16287] loop2: detected capacity change from 0 to 4 [ 2290.157834][T16287] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2290.175194][T16278] loop4: detected capacity change from 0 to 4 [ 2290.199431][T16278] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2290.220900][T16287] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000120f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000004060001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2290.365539][T16316] loop4: detected capacity change from 0 to 4 [ 2290.404574][T16316] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2290.414572][ C1] sd 0:0:1:0: tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2290.424418][ C1] sd 0:0:1:0: tag#3025 CDB: opcode=0xe5 (vendor) [ 2290.430745][ C1] sd 0:0:1:0: tag#3025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2290.433941][T16329] loop2: detected capacity change from 0 to 4 [ 2290.439787][ C1] sd 0:0:1:0: tag#3025 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2290.454849][ C1] sd 0:0:1:0: tag#3025 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2290.568893][T16329] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2290.590539][T16329] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2290.612024][T16316] loop4: detected capacity change from 0 to 4 21:47:42 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x700, 0x100000fe) [ 2290.627583][T16316] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000220f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:43 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4e02, 0x100000fe) [ 2290.691718][T16329] loop2: detected capacity change from 0 to 4 [ 2290.702214][T16329] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2290.714695][ C0] sd 0:0:1:0: tag#3047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2290.717219][ C1] sd 0:0:1:0: tag#3048 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2290.724833][ C0] sd 0:0:1:0: tag#3047 CDB: opcode=0xe5 (vendor) [ 2290.734713][ C1] sd 0:0:1:0: tag#3048 CDB: opcode=0xe5 (vendor) [ 2290.741368][ C0] sd 0:0:1:0: tag#3047 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2290.747705][ C1] sd 0:0:1:0: tag#3048 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2290.756816][ C0] sd 0:0:1:0: tag#3047 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2290.766097][ C1] sd 0:0:1:0: tag#3048 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2290.775140][ C0] sd 0:0:1:0: tag#3047 CDB[20]: 80 19 84 20 e0 6c bb [ 2290.784164][ C1] sd 0:0:1:0: tag#3048 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2290.900936][T16366] loop4: detected capacity change from 0 to 4 21:47:43 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2291.015302][T16329] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.033416][T16366] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.088658][ C0] sd 0:0:1:0: tag#3010 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2291.098627][ C0] sd 0:0:1:0: tag#3010 CDB: opcode=0xe5 (vendor) [ 2291.105020][ C0] sd 0:0:1:0: tag#3010 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2291.114070][ C0] sd 0:0:1:0: tag#3010 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2291.123120][ C0] sd 0:0:1:0: tag#3010 CDB[20]: 80 19 21:47:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000070001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:43 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc00, 0x100000fe) [ 2291.183515][T16366] loop4: detected capacity change from 0 to 4 [ 2291.216511][T16366] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.274810][T16385] loop2: detected capacity change from 0 to 4 21:47:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000250f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2291.316606][T16385] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2291.355008][T16393] loop4: detected capacity change from 0 to 4 [ 2291.366285][T16385] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.399467][T16393] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.476204][T16385] loop2: detected capacity change from 0 to 4 [ 2291.476709][T16393] loop4: detected capacity change from 0 to 4 [ 2291.497500][T16385] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2291.512676][ C1] sd 0:0:1:0: tag#3019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2291.522529][ C1] sd 0:0:1:0: tag#3019 CDB: opcode=0xe5 (vendor) [ 2291.528894][ C1] sd 0:0:1:0: tag#3019 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2291.537959][ C1] sd 0:0:1:0: tag#3019 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2291.538975][T16385] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.547014][ C1] sd 0:0:1:0: tag#3019 CDB[20]: 80 19 84 20 e0 6c bb [ 2291.588543][ C0] sd 0:0:1:0: tag#3022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2291.598416][ C0] sd 0:0:1:0: tag#3022 CDB: opcode=0xe5 (vendor) [ 2291.604779][ C0] sd 0:0:1:0: tag#3022 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2291.613919][ C0] sd 0:0:1:0: tag#3022 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2291.622997][ C0] sd 0:0:1:0: tag#3022 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000080001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:44 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x900, 0x100000fe) 21:47:44 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4f02, 0x100000fe) [ 2291.696028][T16393] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.773373][T16420] loop2: detected capacity change from 0 to 4 [ 2291.780461][ C1] sd 0:0:1:0: tag#3026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2291.790332][ C1] sd 0:0:1:0: tag#3026 CDB: opcode=0xe5 (vendor) [ 2291.796696][ C1] sd 0:0:1:0: tag#3026 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2291.805748][ C1] sd 0:0:1:0: tag#3026 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2291.814791][ C1] sd 0:0:1:0: tag#3026 CDB[20]: 80 19 84 20 e0 6c bb 21:47:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2291.825629][T16420] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2291.861588][T16420] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2291.924294][ C1] sd 0:0:1:0: tag#3027 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2291.934260][ C1] sd 0:0:1:0: tag#3027 CDB: opcode=0xe5 (vendor) [ 2291.940744][ C1] sd 0:0:1:0: tag#3027 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2291.949816][ C1] sd 0:0:1:0: tag#3027 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2291.958867][ C1] sd 0:0:1:0: tag#3027 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2291.994185][T16420] loop2: detected capacity change from 0 to 4 [ 2292.023462][T16420] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:44 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2292.052036][T16441] loop4: detected capacity change from 0 to 4 [ 2292.064045][T16420] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.109154][T16441] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.133396][ C0] sd 0:0:1:0: tag#3008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2292.143442][ C0] sd 0:0:1:0: tag#3008 CDB: opcode=0xe5 (vendor) [ 2292.149793][ C0] sd 0:0:1:0: tag#3008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2292.159136][ C0] sd 0:0:1:0: tag#3008 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2292.168204][ C0] sd 0:0:1:0: tag#3008 CDB[20]: 80 19 21:47:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000090001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2292.264590][T16441] loop4: detected capacity change from 0 to 4 [ 2292.285290][T16441] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.301864][T16463] loop2: detected capacity change from 0 to 4 21:47:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000480f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:44 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xd00, 0x100000fe) [ 2292.343237][T16463] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2292.377449][T16463] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.422303][T16473] loop4: detected capacity change from 0 to 4 [ 2292.450434][T16473] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.470674][T16463] loop2: detected capacity change from 0 to 4 [ 2292.487350][T16463] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2292.519174][T16463] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.532033][T16473] loop4: detected capacity change from 0 to 4 [ 2292.552963][T16473] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000000a0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000004c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2292.689932][T16501] loop2: detected capacity change from 0 to 4 [ 2292.694271][T16505] loop4: detected capacity change from 0 to 4 [ 2292.731934][T16505] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.744611][T16501] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2292.775956][T16501] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.812674][T16505] loop4: detected capacity change from 0 to 4 21:47:45 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc000, 0x100000fe) 21:47:45 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa00, 0x100000fe) [ 2292.826228][T16501] loop2: detected capacity change from 0 to 4 [ 2292.833655][T16505] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2292.853805][T16501] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2292.889519][T16501] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000600f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000000b0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:45 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2293.024506][T16543] loop4: detected capacity change from 0 to 4 [ 2293.045152][T16547] loop2: detected capacity change from 0 to 4 [ 2293.058519][T16543] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2293.101971][T16547] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2293.132210][T16543] loop4: detected capacity change from 0 to 4 [ 2293.139935][T16547] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2293.154229][T16543] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000680f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2293.224335][T16547] loop2: detected capacity change from 0 to 4 [ 2293.250732][T16547] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2293.290547][T16575] loop4: detected capacity change from 0 to 4 [ 2293.320051][T16547] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2293.333759][T16575] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000000c0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2293.451204][T16575] loop4: detected capacity change from 0 to 4 [ 2293.468519][T16575] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:45 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xe00, 0x100000fe) 21:47:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000006c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2293.523638][T16594] loop2: detected capacity change from 0 to 4 [ 2293.547645][T16594] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2293.598336][T16594] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2293.620869][T16603] loop4: detected capacity change from 0 to 4 [ 2293.650688][T16603] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2293.684324][T16594] loop2: detected capacity change from 0 to 4 [ 2293.700695][T16594] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2293.719710][T16603] loop4: detected capacity change from 0 to 4 [ 2293.732243][T16594] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000000d0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2293.764420][T16603] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000740f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2293.859824][T16633] loop2: detected capacity change from 0 to 4 [ 2293.893312][T16633] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2293.911789][T16638] loop4: detected capacity change from 0 to 4 [ 2293.924657][T16633] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:46 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xff01, 0x100000fe) 21:47:46 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb00, 0x100000fe) [ 2293.964851][T16638] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2293.978107][T16633] loop2: detected capacity change from 0 to 4 [ 2293.994137][T16633] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2294.032790][T16633] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2294.046283][T16638] loop4: detected capacity change from 0 to 4 21:47:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000000e0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2294.077480][T16638] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000007a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2294.169307][T16674] loop2: detected capacity change from 0 to 4 [ 2294.198418][T16674] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2294.241864][T16674] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2294.296527][T16688] loop4: detected capacity change from 0 to 4 [ 2294.316576][T16688] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2294.326434][T16674] loop2: detected capacity change from 0 to 4 21:47:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000fe0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2294.363291][T16674] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2294.387033][T16674] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2294.448213][T16709] loop4: detected capacity change from 0 to 4 [ 2294.499268][T16709] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:46 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1200, 0x100000fe) 21:47:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000000f0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2294.573710][T16709] loop4: detected capacity change from 0 to 4 [ 2294.591424][T16709] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000011000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2294.653529][T16735] loop2: detected capacity change from 0 to 4 [ 2294.686650][T16741] loop4: detected capacity change from 0 to 4 [ 2294.699516][T16735] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2294.721819][T16741] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2294.736632][T16735] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2294.807049][T16735] loop2: detected capacity change from 0 to 4 [ 2294.814915][T16741] loop4: detected capacity change from 0 to 4 [ 2294.835089][T16735] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2294.846580][T16741] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2294.891157][T16735] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:47 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xff0f, 0x100000fe) [ 2295.088889][ C1] scsi_io_completion_action: 13 callbacks suppressed [ 2295.088928][ C1] sd 0:0:1:0: tag#3066 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2295.105582][ C1] sd 0:0:1:0: tag#3066 CDB: opcode=0xe5 (vendor) [ 2295.111928][ C1] sd 0:0:1:0: tag#3066 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2295.120977][ C1] sd 0:0:1:0: tag#3066 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2295.130047][ C1] sd 0:0:1:0: tag#3066 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:47 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc00, 0x100000fe) 21:47:47 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000012000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000100001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2295.322491][T16791] loop2: detected capacity change from 0 to 4 [ 2295.330658][T16792] loop4: detected capacity change from 0 to 4 [ 2295.337183][ C1] sd 0:0:1:0: tag#3010 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2295.343314][ C0] sd 0:0:1:0: tag#3011 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2295.347020][ C1] sd 0:0:1:0: tag#3010 CDB: opcode=0xe5 (vendor) [ 2295.356818][ C0] sd 0:0:1:0: tag#3011 CDB: opcode=0xe5 (vendor) [ 2295.363130][ C1] sd 0:0:1:0: tag#3010 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2295.369434][ C0] sd 0:0:1:0: tag#3011 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2295.378432][ C1] sd 0:0:1:0: tag#3010 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2295.387441][ C0] sd 0:0:1:0: tag#3011 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2295.396440][ C1] sd 0:0:1:0: tag#3010 CDB[20]: 80 19 84 20 e0 6c bb [ 2295.412125][ C0] sd 0:0:1:0: tag#3011 CDB[20]: 80 19 21:47:47 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2295.532282][ C0] sd 0:0:1:0: tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2295.542258][ C0] sd 0:0:1:0: tag#3025 CDB: opcode=0xe5 (vendor) [ 2295.548610][ C0] sd 0:0:1:0: tag#3025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2295.557666][ C0] sd 0:0:1:0: tag#3025 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2295.566721][ C0] sd 0:0:1:0: tag#3025 CDB[20]: 80 19 21:47:47 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2295.613117][T16791] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2295.652878][ C1] sd 0:0:1:0: tag#3060 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2295.662763][ C1] sd 0:0:1:0: tag#3060 CDB: opcode=0xe5 (vendor) [ 2295.669102][ C1] sd 0:0:1:0: tag#3060 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2295.678148][ C1] sd 0:0:1:0: tag#3060 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2295.687195][ C1] sd 0:0:1:0: tag#3060 CDB[20]: 80 19 21:47:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2295.704837][T16791] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2295.725968][T16792] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:48 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2000, 0x100000fe) [ 2295.782746][ C1] sd 0:0:1:0: tag#3061 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2295.792641][ C1] sd 0:0:1:0: tag#3061 CDB: opcode=0xe5 (vendor) [ 2295.799002][ C1] sd 0:0:1:0: tag#3061 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2295.808412][ C1] sd 0:0:1:0: tag#3061 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2295.817484][ C1] sd 0:0:1:0: tag#3061 CDB[20]: 80 19 21:47:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2295.831226][T16792] loop4: detected capacity change from 0 to 4 [ 2295.902684][ C1] sd 0:0:1:0: tag#3062 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2295.912534][ C1] sd 0:0:1:0: tag#3062 CDB: opcode=0xe5 (vendor) [ 2295.918871][ C1] sd 0:0:1:0: tag#3062 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2295.927943][ C1] sd 0:0:1:0: tag#3062 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2295.937012][ C1] sd 0:0:1:0: tag#3062 CDB[20]: 80 19 [ 2295.952057][T16792] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2295.962943][T16791] loop2: detected capacity change from 0 to 4 [ 2295.984620][T16791] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2295.997490][ C1] sd 0:0:1:0: tag#3066 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2296.007371][ C1] sd 0:0:1:0: tag#3066 CDB: opcode=0xe5 (vendor) [ 2296.013728][ C1] sd 0:0:1:0: tag#3066 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2296.022792][ C1] sd 0:0:1:0: tag#3066 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2296.031816][ C1] sd 0:0:1:0: tag#3066 CDB[20]: 80 19 84 20 e0 6c bb [ 2296.057176][T16791] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2296.067349][ C0] sd 0:0:1:0: tag#3071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2296.077210][ C0] sd 0:0:1:0: tag#3071 CDB: opcode=0xe5 (vendor) [ 2296.083573][ C0] sd 0:0:1:0: tag#3071 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2296.092628][ C0] sd 0:0:1:0: tag#3071 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 21:47:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000004100001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2296.101678][ C0] sd 0:0:1:0: tag#3071 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2296.123218][ C1] sd 0:0:1:0: tag#3014 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2296.133090][ C1] sd 0:0:1:0: tag#3014 CDB: opcode=0xe5 (vendor) [ 2296.139422][ C1] sd 0:0:1:0: tag#3014 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2296.148495][ C1] sd 0:0:1:0: tag#3014 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2296.157553][ C1] sd 0:0:1:0: tag#3014 CDB[20]: 80 19 21:47:48 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x20000, 0x100000fe) 21:47:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000110001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000020000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:48 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xd00, 0x100000fe) 21:47:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2296.342679][T16865] loop4: detected capacity change from 0 to 4 [ 2296.360835][T16867] loop2: detected capacity change from 0 to 4 21:47:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2296.383404][T16865] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2296.411920][T16867] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2296.450524][T16867] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2296.473713][T16865] loop4: detected capacity change from 0 to 4 21:47:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2296.503206][T16865] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2296.546685][T16867] loop2: detected capacity change from 0 to 4 [ 2296.561547][T16867] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000007cd000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2296.587032][T16867] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2296.672589][T16903] loop4: detected capacity change from 0 to 4 [ 2296.722738][T16903] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2296.774374][T16903] loop4: detected capacity change from 0 to 4 [ 2296.797523][T16903] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:49 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2200, 0x100000fe) 21:47:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000120001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:49 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000002000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2296.986504][T16928] loop4: detected capacity change from 0 to 4 [ 2296.998120][T16931] loop2: detected capacity change from 0 to 4 [ 2297.005550][T16928] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2297.026201][T16931] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2297.038317][T16931] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2297.083137][T16928] loop4: detected capacity change from 0 to 4 [ 2297.090304][T16931] loop2: detected capacity change from 0 to 4 [ 2297.106447][T16928] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2297.119494][T16931] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2297.146527][T16931] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:49 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x40800, 0x100000fe) 21:47:49 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000003000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:49 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xe00, 0x100000fe) 21:47:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000200001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2297.553677][T16974] loop4: detected capacity change from 0 to 4 [ 2297.580989][T16974] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2297.597148][T16982] loop2: detected capacity change from 0 to 4 21:47:49 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2297.631996][T16982] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2297.654537][T16974] loop4: detected capacity change from 0 to 4 21:47:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000004000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2297.677851][T16974] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2297.693151][T16982] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:50 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3f00, 0x100000fe) 21:47:50 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2297.777190][T16982] loop2: detected capacity change from 0 to 4 [ 2297.802365][T16982] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000010200001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2297.847866][T17005] loop4: detected capacity change from 0 to 4 [ 2297.851892][T16982] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2297.877991][T17005] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:50 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2297.971311][T17005] loop4: detected capacity change from 0 to 4 [ 2298.000782][T17005] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:50 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2298.016147][T17030] loop2: detected capacity change from 0 to 4 [ 2298.061882][T17030] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2298.108840][T17030] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2298.196787][T17030] loop2: detected capacity change from 0 to 4 [ 2298.213301][T17030] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2298.246391][T17030] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:50 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x80000, 0x100000fe) 21:47:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000005000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:50 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000220001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:51 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xe04, 0x100000fe) [ 2298.634587][T17067] loop4: detected capacity change from 0 to 4 [ 2298.653120][T17067] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:51 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2298.723067][T17082] loop2: detected capacity change from 0 to 4 [ 2298.739068][T17067] loop4: detected capacity change from 0 to 4 [ 2298.756503][T17067] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2298.791340][T17082] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000006000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2298.853457][T17082] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2298.917391][T17108] loop4: detected capacity change from 0 to 4 [ 2298.944787][T17108] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2298.954421][T17082] loop2: detected capacity change from 0 to 4 21:47:51 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4000, 0x100000fe) 21:47:51 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2298.973918][T17082] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2299.010269][T17082] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000250001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:51 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2299.045619][T17108] loop4: detected capacity change from 0 to 4 [ 2299.071708][T17108] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000007000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2299.185836][T17142] loop2: detected capacity change from 0 to 4 [ 2299.215395][T17142] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2299.238846][T17142] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2299.246890][T17146] loop4: detected capacity change from 0 to 4 [ 2299.288003][T17146] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2299.306703][T17142] loop2: detected capacity change from 0 to 4 [ 2299.318992][T17142] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2299.343996][T17142] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2299.369646][T17146] loop4: detected capacity change from 0 to 4 [ 2299.400718][T17146] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:52 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x80400, 0x100000fe) 21:47:52 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000002e0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000008000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2299.751096][T17184] loop4: detected capacity change from 0 to 4 [ 2299.753211][T17186] loop2: detected capacity change from 0 to 4 [ 2299.787802][T17186] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2299.791413][T17184] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2299.799576][T17186] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:52 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1200, 0x100000fe) 21:47:52 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2299.849942][T17186] loop2: detected capacity change from 0 to 4 [ 2299.863385][T17186] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2299.873860][T17186] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000003f0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2299.904123][T17184] loop4: detected capacity change from 0 to 4 [ 2299.932148][T17184] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2300.003325][T17230] loop2: detected capacity change from 0 to 4 21:47:52 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6a00, 0x100000fe) 21:47:52 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000009000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2300.051661][T17230] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2300.075542][T17230] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2300.144046][T17230] loop2: detected capacity change from 0 to 4 [ 2300.162612][T17259] loop4: detected capacity change from 0 to 4 [ 2300.172700][T17230] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2300.187775][T17259] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2300.199809][ C1] scsi_io_completion_action: 27 callbacks suppressed [ 2300.199836][ C1] sd 0:0:1:0: tag#3063 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2300.216403][T17230] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2300.216569][ C1] sd 0:0:1:0: tag#3063 CDB: opcode=0xe5 (vendor) [ 2300.232490][ C1] sd 0:0:1:0: tag#3063 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:47:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000400001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2300.241533][ C1] sd 0:0:1:0: tag#3063 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2300.250759][ C1] sd 0:0:1:0: tag#3063 CDB[20]: 80 19 21:47:52 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2300.394240][T17259] loop4: detected capacity change from 0 to 4 [ 2300.413858][T17259] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2300.459499][ C1] sd 0:0:1:0: tag#3011 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2300.461307][T17276] loop2: detected capacity change from 0 to 4 [ 2300.469370][ C1] sd 0:0:1:0: tag#3011 CDB: opcode=0xe5 (vendor) [ 2300.481886][ C1] sd 0:0:1:0: tag#3011 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2300.491112][ C1] sd 0:0:1:0: tag#3011 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2300.500181][ C1] sd 0:0:1:0: tag#3011 CDB[20]: 80 19 [ 2300.562277][T17276] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2300.595663][T17276] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2300.642654][ C1] sd 0:0:1:0: tag#3012 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2300.652533][ C1] sd 0:0:1:0: tag#3012 CDB: opcode=0xe5 (vendor) [ 2300.658868][ C1] sd 0:0:1:0: tag#3012 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2300.668016][ C1] sd 0:0:1:0: tag#3012 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2300.677070][ C1] sd 0:0:1:0: tag#3012 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2300.737074][ C0] sd 0:0:1:0: tag#3053 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2300.746954][ C0] sd 0:0:1:0: tag#3053 CDB: opcode=0xe5 (vendor) [ 2300.753499][ C0] sd 0:0:1:0: tag#3053 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2300.762881][ C0] sd 0:0:1:0: tag#3053 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2300.772003][ C0] sd 0:0:1:0: tag#3053 CDB[20]: 80 19 84 20 e0 6c bb [ 2300.804500][T17276] loop2: detected capacity change from 0 to 4 [ 2300.824574][T17276] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000a000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:53 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x100000, 0x100000fe) 21:47:53 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2300.865861][T17276] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000800400001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2300.923679][T17309] loop4: detected capacity change from 0 to 4 [ 2300.964416][T17309] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2300.971590][ C1] sd 0:0:1:0: tag#3043 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2300.983790][ C1] sd 0:0:1:0: tag#3043 CDB: opcode=0xe5 (vendor) [ 2300.990146][ C1] sd 0:0:1:0: tag#3043 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2300.999469][ C1] sd 0:0:1:0: tag#3043 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2301.008547][ C1] sd 0:0:1:0: tag#3043 CDB[20]: 80 19 [ 2301.022090][ C1] sd 0:0:1:0: tag#3066 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2301.032101][ C1] sd 0:0:1:0: tag#3066 CDB: opcode=0xe5 (vendor) [ 2301.038468][ C1] sd 0:0:1:0: tag#3066 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2301.047562][ C1] sd 0:0:1:0: tag#3066 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2301.057073][ C1] sd 0:0:1:0: tag#3066 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:53 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1400, 0x100000fe) [ 2301.158448][T17309] loop4: detected capacity change from 0 to 4 [ 2301.175517][T17309] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:53 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:53 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6b00, 0x100000fe) 21:47:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000b000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2301.223782][T17334] loop2: detected capacity change from 0 to 4 [ 2301.256126][T17334] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2301.273540][ C1] sd 0:0:1:0: tag#3008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2301.283492][ C1] sd 0:0:1:0: tag#3008 CDB: opcode=0xe5 (vendor) [ 2301.290091][ C1] sd 0:0:1:0: tag#3008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2301.299510][ C1] sd 0:0:1:0: tag#3008 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2301.308798][ C1] sd 0:0:1:0: tag#3008 CDB[20]: 80 19 [ 2301.316390][ C0] sd 0:0:1:0: tag#3080 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2301.326245][ C0] sd 0:0:1:0: tag#3080 CDB: opcode=0xe5 (vendor) [ 2301.326296][T17345] loop4: detected capacity change from 0 to 4 [ 2301.332802][ C0] sd 0:0:1:0: tag#3080 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2301.332820][ C0] sd 0:0:1:0: tag#3080 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2301.342033][T17334] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2301.348030][ C0] sd 0:0:1:0: tag#3080 CDB[20]: 80 19 84 20 e0 6c bb [ 2301.367870][T17345] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:53 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 21:47:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000c000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2301.561319][T17334] loop2: detected capacity change from 0 to 4 [ 2301.618245][ C0] sd 0:0:1:0: tag#3017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2301.621001][T17334] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2301.628319][ C0] sd 0:0:1:0: tag#3017 CDB: opcode=0xe5 (vendor) [ 2301.643957][ C0] sd 0:0:1:0: tag#3017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2301.653106][ C0] sd 0:0:1:0: tag#3017 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2301.662262][ C0] sd 0:0:1:0: tag#3017 CDB[20]: 80 19 [ 2301.679697][T17370] loop4: detected capacity change from 0 to 4 [ 2301.747149][T17334] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2301.759146][T17370] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000480001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2301.835983][T17370] loop4: detected capacity change from 0 to 4 [ 2301.840854][ C0] sd 0:0:1:0: tag#3018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2301.852143][ C0] sd 0:0:1:0: tag#3018 CDB: opcode=0xe5 (vendor) [ 2301.858547][ C0] sd 0:0:1:0: tag#3018 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2301.867697][ C0] sd 0:0:1:0: tag#3018 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2301.876920][ C0] sd 0:0:1:0: tag#3018 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:54 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) [ 2301.878344][T17370] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000d000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:54 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x800000, 0x100000fe) [ 2302.065700][T17398] loop2: detected capacity change from 0 to 4 [ 2302.092334][T17398] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:54 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2000, 0x100000fe) [ 2302.137332][T17411] loop4: detected capacity change from 0 to 4 [ 2302.140773][T17398] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2302.193761][T17411] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2302.228502][T17398] loop2: detected capacity change from 0 to 4 21:47:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000e000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2302.255328][T17398] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000004c0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2302.295845][T17398] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2302.331817][T17436] loop4: detected capacity change from 0 to 4 21:47:54 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7800, 0x100000fe) [ 2302.366653][T17436] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2302.472852][T17436] loop4: detected capacity change from 0 to 4 [ 2302.488668][T17452] loop2: detected capacity change from 0 to 4 [ 2302.499083][T17436] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000010000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2302.520854][T17452] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2302.560240][T17452] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2302.636183][T17452] loop2: detected capacity change from 0 to 4 [ 2302.658023][T17452] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2302.661988][T17472] loop4: detected capacity change from 0 to 4 [ 2302.713682][T17472] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2302.722532][T17452] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000600001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2302.805228][T17472] loop4: detected capacity change from 0 to 4 [ 2302.823365][T17472] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:55 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) [ 2302.877470][T17492] loop2: detected capacity change from 0 to 4 [ 2302.898466][T17492] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000011000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2302.966794][T17492] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2303.000937][T17504] loop4: detected capacity change from 0 to 4 [ 2303.045954][T17492] loop2: detected capacity change from 0 to 4 [ 2303.058794][T17504] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2303.066237][T17492] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2303.087293][T17421] ================================================================== [ 2303.095591][T17421] BUG: KCSAN: data-race in ext4_setattr / mpage_process_page_bufs [ 2303.103503][T17421] [ 2303.106099][T17421] write to 0xffff88814cefebc8 of 8 bytes by task 17501 on cpu 0: [ 2303.113850][T17421] ext4_setattr+0xd7f/0xef0 [ 2303.118465][T17421] notify_change+0x8a3/0xac0 [ 2303.120742][T17492] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2303.123182][T17421] do_truncate+0xf7/0x140 [ 2303.123205][T17421] path_openat+0x1925/0x1ec0 [ 2303.123225][T17421] do_filp_open+0x105/0x220 [ 2303.145882][T17421] do_sys_openat2+0xb5/0x2b0 [ 2303.150474][T17421] __x64_sys_creat+0x62/0x80 [ 2303.155068][T17421] do_syscall_64+0x44/0xa0 [ 2303.159496][T17421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2303.165487][T17421] [ 2303.167825][T17421] read to 0xffff88814cefebc8 of 8 bytes by task 17421 on cpu 1: [ 2303.175454][T17421] mpage_process_page_bufs+0x34/0x560 [ 2303.180837][T17421] mpage_prepare_extent_to_map+0x4f6/0x650 [ 2303.186655][T17421] ext4_writepages+0xa18/0x1d70 [ 2303.191516][T17421] do_writepages+0x26b/0x3c0 [ 2303.196117][T17421] filemap_flush+0x154/0x180 [ 2303.200720][T17421] ext4_alloc_da_blocks+0x47/0xd0 [ 2303.205758][T17421] ext4_release_file+0x5b/0x1d0 [ 2303.210613][T17421] __fput+0x295/0x520 [ 2303.214687][T17421] ____fput+0x11/0x20 [ 2303.218687][T17421] task_work_run+0xae/0x130 [ 2303.223199][T17421] get_signal+0x155c/0x15d0 [ 2303.227712][T17421] arch_do_signal_or_restart+0x8c/0x280 [ 2303.233277][T17421] exit_to_user_mode_prepare+0x109/0x190 [ 2303.238921][T17421] syscall_exit_to_user_mode+0x20/0x40 [ 2303.244383][T17421] do_syscall_64+0x50/0xa0 [ 2303.248810][T17421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2303.254805][T17421] [ 2303.257123][T17421] value changed: 0x00000000006d5000 -> 0x0000000000000000 [ 2303.264231][T17421] [ 2303.266914][T17421] Reported by Kernel Concurrency Sanitizer on: [ 2303.273061][T17421] CPU: 1 PID: 17421 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2303.283304][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.293522][T17421] ================================================================== 21:47:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000680001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:55 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc00000, 0x100000fe) [ 2303.343092][T17504] loop4: detected capacity change from 0 to 4 [ 2303.373157][T17504] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000012000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2303.437558][T17546] loop2: detected capacity change from 0 to 4 [ 2303.468430][T17546] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:55 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2200, 0x100000fe) [ 2303.513066][T17546] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2303.548564][T17555] loop4: detected capacity change from 0 to 4 [ 2303.592358][T17555] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2303.626462][T17546] loop2: detected capacity change from 0 to 4 21:47:56 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7900, 0x100000fe) [ 2303.651394][T17546] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2303.686549][T17546] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2303.687218][T17555] loop4: detected capacity change from 0 to 4 [ 2303.724928][T17555] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000006c0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000000cd070000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2303.881435][T17587] loop2: detected capacity change from 0 to 4 [ 2303.922100][T17587] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2303.928797][T17590] loop4: detected capacity change from 0 to 4 [ 2303.972521][T17587] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2303.982727][T17590] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:56 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100000fe) [ 2304.037738][T17590] loop4: detected capacity change from 0 to 4 [ 2304.043778][T17587] loop2: detected capacity change from 0 to 4 [ 2304.064710][T17587] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2304.077992][T17590] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2304.109475][T17587] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000020000000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000740001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2304.226295][T17620] loop4: detected capacity change from 0 to 4 [ 2304.272612][T17620] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) [ 2304.287676][T17629] loop2: detected capacity change from 0 to 4 [ 2304.328660][T17629] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2304.361445][T17620] loop4: detected capacity change from 0 to 4 [ 2304.367783][T17629] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:56 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1000000, 0x100000fe) [ 2304.393121][T17620] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) 21:47:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000040000000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2304.452939][T17629] loop2: detected capacity change from 0 to 4 [ 2304.482528][T17629] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2304.528456][T17662] loop4: detected capacity change from 0 to 4 [ 2304.546269][T17629] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2304.579996][T17662] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) 21:47:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000d49ead790001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:57 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3f00, 0x100000fe) [ 2304.649335][T17662] loop4: detected capacity change from 0 to 4 [ 2304.679610][T17662] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) 21:47:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000001140000000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:57 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x8101, 0x100000fe) [ 2304.728201][T17683] loop2: detected capacity change from 0 to 4 [ 2304.758012][T17683] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2304.810280][T17692] loop4: detected capacity change from 0 to 4 [ 2304.823741][T17683] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2304.836660][T17692] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) [ 2304.907197][T17683] loop2: detected capacity change from 0 to 4 [ 2304.926232][T17692] loop4: detected capacity change from 0 to 4 [ 2304.941716][T17683] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2304.972498][T17692] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) 21:47:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f020000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2305.033009][T17683] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000007a0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2305.113541][T17719] loop4: detected capacity change from 0 to 4 21:47:57 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x0, 0x0, 0x100000fe) [ 2305.157059][T17719] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2305.213629][ C0] scsi_io_completion_action: 13 callbacks suppressed [ 2305.213657][ C0] sd 0:0:1:0: tag#3022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2305.230218][ C0] sd 0:0:1:0: tag#3022 CDB: opcode=0xe5 (vendor) [ 2305.231320][T17730] loop2: detected capacity change from 0 to 4 [ 2305.236582][ C0] sd 0:0:1:0: tag#3022 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2305.236602][ C0] sd 0:0:1:0: tag#3022 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2305.260930][ C0] sd 0:0:1:0: tag#3022 CDB[20]: 80 19 [ 2305.296329][T17730] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2305.312563][T17719] loop4: detected capacity change from 0 to 4 [ 2305.339972][T17719] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2305.355465][T17730] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2305.375793][ C0] sd 0:0:1:0: tag#3023 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 21:47:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f030000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2305.385667][ C0] sd 0:0:1:0: tag#3023 CDB: opcode=0xe5 (vendor) [ 2305.392017][ C0] sd 0:0:1:0: tag#3023 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2305.401094][ C0] sd 0:0:1:0: tag#3023 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2305.410173][ C0] sd 0:0:1:0: tag#3023 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2305.550693][T17730] loop2: detected capacity change from 0 to 4 [ 2305.555971][T17747] loop4: detected capacity change from 0 to 4 [ 2305.586352][T17747] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2305.595924][T17730] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2305.610754][ C0] sd 0:0:1:0: tag#3044 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2305.620646][ C0] sd 0:0:1:0: tag#3044 CDB: opcode=0xe5 (vendor) [ 2305.627062][ C0] sd 0:0:1:0: tag#3044 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2305.636145][ C0] sd 0:0:1:0: tag#3044 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 21:47:57 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2000000, 0x100000fe) [ 2305.645207][ C0] sd 0:0:1:0: tag#3044 CDB[20]: 80 19 84 20 e0 6c bb [ 2305.661274][T17730] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2305.741363][T17747] loop4: detected capacity change from 0 to 4 [ 2305.758339][ C1] sd 0:0:1:0: tag#3031 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2305.768230][ C1] sd 0:0:1:0: tag#3031 CDB: opcode=0xe5 (vendor) [ 2305.774609][ C1] sd 0:0:1:0: tag#3031 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 21:47:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000ffffff850001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:47:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f040000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2305.783760][ C1] sd 0:0:1:0: tag#3031 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2305.791182][T17747] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2305.792830][ C1] sd 0:0:1:0: tag#3031 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:47:58 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc000, 0x100000fe) [ 2305.900624][T17791] loop2: detected capacity change from 0 to 4 [ 2305.907121][T17790] loop4: detected capacity change from 0 to 4 [ 2305.940547][T17791] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:58 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x0, 0x0, 0x100000fe) 21:47:58 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4000, 0x100000fe) [ 2305.953646][T17790] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2305.970374][T17791] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2306.020360][ C0] sd 0:0:1:0: tag#3016 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2306.030277][ C0] sd 0:0:1:0: tag#3016 CDB: opcode=0xe5 (vendor) [ 2306.036647][ C0] sd 0:0:1:0: tag#3016 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2306.045950][ C0] sd 0:0:1:0: tag#3016 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2306.055284][ C0] sd 0:0:1:0: tag#3016 CDB[20]: 80 19 84 20 e0 6c bb [ 2306.066596][ C1] sd 0:0:1:0: tag#3019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2306.076535][ C1] sd 0:0:1:0: tag#3019 CDB: opcode=0xe5 (vendor) [ 2306.083023][ C1] sd 0:0:1:0: tag#3019 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2306.092080][ C1] sd 0:0:1:0: tag#3019 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2306.101177][ C1] sd 0:0:1:0: tag#3019 CDB[20]: 80 19 [ 2306.175751][T17791] loop2: detected capacity change from 0 to 4 [ 2306.184642][T17790] loop4: detected capacity change from 0 to 4 [ 2306.210341][T17791] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2306.237388][T17790] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2306.254238][T17791] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f050000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000ffffff8c0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2306.367340][T17823] loop4: detected capacity change from 0 to 4 [ 2306.393066][T17823] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:58 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2040000, 0x100000fe) [ 2306.437904][T17833] loop2: detected capacity change from 0 to 4 [ 2306.448943][T17823] loop4: detected capacity change from 0 to 4 [ 2306.470128][T17823] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2306.483130][ C1] sd 0:0:1:0: tag#3020 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2306.493088][ C1] sd 0:0:1:0: tag#3020 CDB: opcode=0xe5 (vendor) [ 2306.499437][ C1] sd 0:0:1:0: tag#3020 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2306.508516][ C1] sd 0:0:1:0: tag#3020 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2306.517594][ C1] sd 0:0:1:0: tag#3020 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2306.527370][T17833] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2306.552418][T17833] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f060000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2306.682150][T17833] loop2: detected capacity change from 0 to 4 [ 2306.717890][T17833] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2306.753572][T17857] loop4: detected capacity change from 0 to 4 [ 2306.760925][T17833] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2306.783794][T17857] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000ffffff970001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2306.865668][T17857] loop4: detected capacity change from 0 to 4 [ 2306.900998][T17857] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2306.911080][ C1] sd 0:0:1:0: tag#3055 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2306.920932][ C1] sd 0:0:1:0: tag#3055 CDB: opcode=0xe5 (vendor) [ 2306.927403][ C1] sd 0:0:1:0: tag#3055 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2306.936526][ C1] sd 0:0:1:0: tag#3055 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2306.945653][ C1] sd 0:0:1:0: tag#3055 CDB[20]: 80 19 84 20 e0 6c bb 21:47:59 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x0, 0x0, 0x100000fe) 21:47:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f070000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:47:59 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xff01, 0x100000fe) [ 2307.013594][T17882] loop2: detected capacity change from 0 to 4 [ 2307.037245][T17882] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2307.050402][T17882] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2307.086494][T17882] loop2: detected capacity change from 0 to 4 [ 2307.090940][ C1] sd 0:0:1:0: tag#3012 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2307.102431][ C1] sd 0:0:1:0: tag#3012 CDB: opcode=0xe5 (vendor) [ 2307.108768][ C1] sd 0:0:1:0: tag#3012 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2307.117814][ C1] sd 0:0:1:0: tag#3012 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2307.126892][ C1] sd 0:0:1:0: tag#3012 CDB[20]: 80 19 [ 2307.147986][T17882] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2307.173053][T17882] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:59 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7c00, 0x100000fe) [ 2307.221385][T17904] loop4: detected capacity change from 0 to 4 [ 2307.261991][ C1] sd 0:0:1:0: tag#3016 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2307.271867][ C1] sd 0:0:1:0: tag#3016 CDB: opcode=0xe5 (vendor) [ 2307.276932][T17904] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2307.278219][ C1] sd 0:0:1:0: tag#3016 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2307.296593][ C1] sd 0:0:1:0: tag#3016 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2307.305650][ C1] sd 0:0:1:0: tag#3016 CDB[20]: 80 19 84 20 e0 6c bb 21:47:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000001aa0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2307.353209][T17904] loop4: detected capacity change from 0 to 4 [ 2307.391829][T17904] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2307.401297][T17923] loop2: detected capacity change from 0 to 4 [ 2307.439051][T17923] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:47:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f080000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2307.492119][T17923] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:47:59 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3000000, 0x100000fe) [ 2307.556286][T17923] loop2: detected capacity change from 0 to 4 [ 2307.571695][T17940] loop4: detected capacity change from 0 to 4 [ 2307.595924][T17923] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2307.620340][T17923] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2307.630048][T17940] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000001ab0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2307.710028][T17940] loop4: detected capacity change from 0 to 4 [ 2307.732759][T17940] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f090000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2307.776851][T17959] loop2: detected capacity change from 0 to 4 [ 2307.785078][T17959] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2307.795010][T17959] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f0000000000edc00001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2307.850202][T17969] loop4: detected capacity change from 0 to 4 21:48:00 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x0) [ 2307.896403][T17969] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2307.918873][T17978] loop2: detected capacity change from 0 to 4 [ 2307.942478][T17978] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2307.976197][T17969] loop4: detected capacity change from 0 to 4 [ 2307.986805][T17978] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2307.998317][T17969] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f0a0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2308.086356][T17978] loop2: detected capacity change from 0 to 4 [ 2308.118059][T18007] loop4: detected capacity change from 0 to 4 [ 2308.124554][T17978] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2308.154324][T18007] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2308.170370][T17978] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:00 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xff0f, 0x100000fe) 21:48:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000079ad9ed40001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2308.222942][T18007] loop4: detected capacity change from 0 to 4 [ 2308.275461][T18007] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f0b0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2308.340645][T18033] loop2: detected capacity change from 0 to 4 [ 2308.361898][T18033] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:48:00 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7d00, 0x100000fe) [ 2308.389032][T18033] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2308.412476][T18040] loop4: detected capacity change from 0 to 4 [ 2308.448127][T18040] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2308.517338][T18033] loop2: detected capacity change from 0 to 4 [ 2308.527102][T18040] loop4: detected capacity change from 0 to 4 [ 2308.544401][T18040] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2308.556024][T18033] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2308.609424][T18033] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f0c0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:48:01 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x9100, 0x100000fe) [ 2308.706043][T18072] loop4: detected capacity change from 0 to 4 [ 2308.715770][T18072] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:01 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4000000, 0x100000fe) 21:48:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000ffffffda0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:48:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f0d0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2308.810110][T18088] loop2: detected capacity change from 0 to 4 [ 2308.821555][T18093] loop4: detected capacity change from 0 to 4 [ 2308.849317][T18088] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2308.881114][T18088] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2308.906924][T18093] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fffffff60001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:48:01 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x0) [ 2308.987108][T18093] loop4: detected capacity change from 0 to 4 [ 2309.019221][T18093] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2309.057586][T18116] loop2: detected capacity change from 0 to 4 [ 2309.080766][T18116] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:48:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f0e0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2309.119737][T18116] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2309.188047][T18134] loop4: detected capacity change from 0 to 4 [ 2309.207287][T18116] loop2: detected capacity change from 0 to 4 [ 2309.226842][T18116] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:48:01 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x10400, 0x100000fe) [ 2309.237472][T18134] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2309.275467][T18116] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fffffdf90001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2309.315960][T18134] loop4: detected capacity change from 0 to 4 [ 2309.337913][T18134] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f0f0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2309.487506][T18164] loop4: detected capacity change from 0 to 4 [ 2309.493255][T18166] loop2: detected capacity change from 0 to 4 [ 2309.517556][T18166] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2309.544036][T18164] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2309.552890][T18166] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2309.624266][T18166] loop2: detected capacity change from 0 to 4 [ 2309.628388][T18164] loop4: detected capacity change from 0 to 4 [ 2309.647201][T18166] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2309.670282][T18164] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2309.695987][T18166] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000001fa0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:48:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f100000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2309.860829][T18195] loop4: detected capacity change from 0 to 4 [ 2309.863165][T18194] loop2: detected capacity change from 0 to 4 [ 2309.887472][T18194] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:48:02 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x9200, 0x100000fe) 21:48:02 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x5000000, 0x100000fe) [ 2309.911658][T18194] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2309.934126][T18195] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2310.012441][T18194] loop2: detected capacity change from 0 to 4 [ 2310.016899][T18195] loop4: detected capacity change from 0 to 4 [ 2310.031539][T18194] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2310.052111][T18195] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:02 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x0) [ 2310.066638][T18194] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f110000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:48:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fffffdfd0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2310.191784][T18234] loop4: detected capacity change from 0 to 4 [ 2310.219900][T18234] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2310.296444][T18234] loop4: detected capacity change from 0 to 4 [ 2310.304340][T18247] loop2: detected capacity change from 0 to 4 [ 2310.321278][T18234] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2310.333315][T18247] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:48:02 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x20000, 0x100000fe) 21:48:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f120000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2310.372215][T18247] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2310.457744][T18264] loop4: detected capacity change from 0 to 4 [ 2310.478261][T18247] loop2: detected capacity change from 0 to 4 [ 2310.510810][T18247] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2310.522350][T18264] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2310.556342][T18247] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fffffffd0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2310.603273][T18264] loop4: detected capacity change from 0 to 4 [ 2310.627763][T18264] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f220000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2310.712535][T18285] loop2: detected capacity change from 0 to 4 [ 2310.746708][T18285] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2310.791703][T18285] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2310.820121][T18294] loop4: detected capacity change from 0 to 4 [ 2310.842250][ C0] scsi_io_completion_action: 14 callbacks suppressed [ 2310.842291][ C0] sd 0:0:1:0: tag#3062 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2310.858881][ C0] sd 0:0:1:0: tag#3062 CDB: opcode=0xe5 (vendor) [ 2310.865245][ C0] sd 0:0:1:0: tag#3062 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2310.874304][ C0] sd 0:0:1:0: tag#3062 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2310.883351][ C0] sd 0:0:1:0: tag#3062 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 [ 2310.894226][T18294] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2310.931552][T18285] loop2: detected capacity change from 0 to 4 [ 2310.955893][T18294] loop4: detected capacity change from 0 to 4 [ 2310.977620][T18285] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled 21:48:03 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6000000, 0x100000fe) [ 2311.031925][T18285] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2311.047273][T18294] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fffffffe0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 21:48:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f250000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2311.094829][ C1] sd 0:0:1:0: tag#3011 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2311.104967][ C1] sd 0:0:1:0: tag#3011 CDB: opcode=0xe5 (vendor) [ 2311.111299][ C1] sd 0:0:1:0: tag#3011 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2311.120350][ C1] sd 0:0:1:0: tag#3011 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2311.129574][ C1] sd 0:0:1:0: tag#3011 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:48:03 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x9300, 0x100000fe) 21:48:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000b000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2311.244281][T18327] loop2: detected capacity change from 0 to 4 [ 2311.255407][ C1] sd 0:0:1:0: tag#3012 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2311.265268][ C1] sd 0:0:1:0: tag#3012 CDB: opcode=0xe5 (vendor) [ 2311.271813][ C1] sd 0:0:1:0: tag#3012 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2311.281031][ C1] sd 0:0:1:0: tag#3012 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 21:48:03 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0}]) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 2311.287152][T18340] loop4: detected capacity change from 0 to 4 [ 2311.290071][ C1] sd 0:0:1:0: tag#3012 CDB[20]: 80 19 84 20 e0 6c bb [ 2311.299464][T18327] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2311.352435][T18327] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2311.365090][ C0] sd 0:0:1:0: tag#3035 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2311.375047][ C0] sd 0:0:1:0: tag#3035 CDB: opcode=0xe5 (vendor) [ 2311.381385][ C0] sd 0:0:1:0: tag#3035 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2311.390471][ C0] sd 0:0:1:0: tag#3035 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2311.399516][ C0] sd 0:0:1:0: tag#3035 CDB[20]: 80 19 [ 2311.405220][T18340] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:03 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc00, 0x100000fe) 21:48:03 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x40000, 0x100000fe) [ 2311.463405][T18327] loop2: detected capacity change from 0 to 4 [ 2311.484514][T18340] loop4: detected capacity change from 0 to 4 [ 2311.489484][T18327] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2311.516220][T18340] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2311.528997][ C0] sd 0:0:1:0: tag#3044 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2311.538859][ C0] sd 0:0:1:0: tag#3044 CDB: opcode=0xe5 (vendor) [ 2311.540355][T18327] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2311.545212][ C0] sd 0:0:1:0: tag#3044 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2311.545231][ C0] sd 0:0:1:0: tag#3044 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2311.545246][ C0] sd 0:0:1:0: tag#3044 CDB[20]: 80 19 84 20 e0 6c bb 21:48:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f2e0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:48:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000000fff0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2311.746090][T18375] loop2: detected capacity change from 0 to 4 [ 2311.752071][T18382] loop4: detected capacity change from 0 to 4 [ 2311.775652][T18375] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2311.803343][T18382] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2311.829815][T18375] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2311.882428][T18382] loop4: detected capacity change from 0 to 4 [ 2311.896220][T18375] loop2: detected capacity change from 0 to 4 [ 2311.913625][T18382] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2311.930556][T18375] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2311.965093][T18375] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f480000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2311.996218][ C1] sd 0:0:1:0: tag#3053 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2312.006109][ C1] sd 0:0:1:0: tag#3053 CDB: opcode=0xe5 (vendor) [ 2312.012468][ C1] sd 0:0:1:0: tag#3053 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2312.021494][ C1] sd 0:0:1:0: tag#3053 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2312.030575][ C1] sd 0:0:1:0: tag#3053 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:48:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000fffffbff0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2312.088981][T18415] loop4: detected capacity change from 0 to 4 [ 2312.110941][T18415] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2312.117158][ C0] sd 0:0:1:0: tag#3008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2312.130376][ C0] sd 0:0:1:0: tag#3008 CDB: opcode=0xe5 (vendor) 21:48:04 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6040000, 0x100000fe) [ 2312.136740][ C0] sd 0:0:1:0: tag#3008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2312.145796][ C0] sd 0:0:1:0: tag#3008 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2312.154845][ C0] sd 0:0:1:0: tag#3008 CDB[20]: 80 19 84 20 e0 6c bb [ 2312.202031][T18415] loop4: detected capacity change from 0 to 4 [ 2312.238007][ C0] sd 0:0:1:0: tag#3015 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2312.247891][ C0] sd 0:0:1:0: tag#3015 CDB: opcode=0xe5 (vendor) [ 2312.253562][T18415] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2312.254331][ C0] sd 0:0:1:0: tag#3015 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2312.272938][ C0] sd 0:0:1:0: tag#3015 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2312.282243][ C0] sd 0:0:1:0: tag#3015 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 21:48:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f4c0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) [ 2312.309620][T18433] loop2: detected capacity change from 0 to 4 [ 2312.435564][T18433] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2312.456611][T18433] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:04 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc000, 0x100000fe) 21:48:04 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x40100, 0x100000fe) [ 2312.508887][T18433] loop2: detected capacity change from 0 to 4 [ 2312.532121][T18433] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2312.546083][T18433] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:04 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "00001000"}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc00, 0x100000fe) [ 2312.580639][ C0] sd 0:0:1:0: tag#3048 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2312.590503][ C0] sd 0:0:1:0: tag#3048 CDB: opcode=0xe5 (vendor) [ 2312.596980][ C0] sd 0:0:1:0: tag#3048 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2312.606035][ C0] sd 0:0:1:0: tag#3048 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2312.609385][ C1] sd 0:0:1:0: tag#3049 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2312.615101][ C0] sd 0:0:1:0: tag#3048 CDB[20]: 80 19 84 20 e0 6c bb [ 2312.631609][ C1] sd 0:0:1:0: tag#3049 CDB: opcode=0xe5 (vendor) [ 2312.637974][ C1] sd 0:0:1:0: tag#3049 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 2312.647039][ C1] sd 0:0:1:0: tag#3049 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 2312.653140][T18463] loop4: detected capacity change from 0 to 4 [ 2312.656188][ C1] sd 0:0:1:0: tag#3049 CDB[20]: 80 19 84 20 e0 6c bb [ 2312.715320][T18463] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f00000000e0ffff0001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 2312.907284][T18463] loop4: detected capacity change from 0 to 4 [ 2312.941537][T18463] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 21:48:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f600000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000080)) 21:48:05 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fsmount(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb030000000000", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7000000, 0x100000fe) [ 2312.985205][T18480] loop2: detected capacity change from 0 to 4 [ 2313.014251][T18480] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2313.038975][T18480] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 2313.094161][T18491] loop4: detected capacity change from 0 to 4 [ 2313.106573][T18480] loop2: detected capacity change from 0 to 4 [ 2313.127204][T18480] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled